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Introduction 


Introduction 


The ability of the Model 100/102 to allow an additional 32K of program space 
in the Option ROM socket has long been known, but until recently the technique 
for creating programs within this space appears to have been a closely heldsecret 
by a handful of companies who have figured out how to do it. 


In some ways it is possible to understand their viewpoint. It takes a great deal 
of Research and Development dollars to figure this out. It took me 3 years of 
work off and on in the middle of other contracts, and I was only paid for a small 
fraction of the time it took to scope the subject out. 


Tandy and Microsoft’s distinctive brand of unhelpfulness makes the task even 
harder. Tandy claims that they cannot provide data on the operating system 
because it is a Microsoft software package. Microsoft claims that they cannot 
provide data on the operating system because they wrote it exclusively for 
Tandy. It is a total Catch-22 situation, and developers are just plain caught in 
the middle. 


Ihave to be blunt. The book is not for amateurs. You must have some familiarity 
with assembly language programming preferably on an 8080 or 80C85 chip, and 
a good grasp of computer basics, including macros, memory allocation, 
mapping, I/O, and stack handling. 


Throughout the book I refer to developing on the Model 100. I am refering to 
the Model 100 and/or Model 102 Portables from Tandy. The principles apply to 
the other members of the this laptop family which include the Tandy Model 200, 
the NEC 8201, the NEC 8300, the Kyocera Laptop and any other flavours of the 
machine although the addresses will be different. 


You must have some experience with Model 100 machine language (.CO) 
programs. 
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I would love to say the subject is simple, but it isn’t. However, with some 
patience and experimentation you will be able to produce your own Option 
ROM programs in no time. 


All the code in this manual was generated and compiled on an IBM PC and 
down loaded to the Model 100, or to an option ROM burner. The Assembler 
and Linker used are the Digital Research relocating macro assembler RMAC 
and LINK80, both developed for the CP/M operating system (an 8080 
environment). 


Any assembler that can create a machine language or Intel Hex formatted file 
ORGed at address 0000 can be used to develop Option ROM code and that 
does not re-organize your code for you, can be used. This leaves out the 
Microsoft MACRO-80 Assembler which reorganizes the program so that all 
data appears first, all code second, and then sets a JMP at the beginning of the 
program to jump over the datz to the first line of your actual code. 


This may be an oversimplification of MACRO-80 and there may be some way 
of setting it to avoid this arrangement, but when I saw it, I just put it back in 
the box and sent it back to the dealer. 


The manual is designed to walk you through each of the problems that you will 
encounter calling from and returning to an Option ROM, and the different 
phases leading up to ROMHD.ASM. 


If you ever want to write an Option ROM that can be called from hooks in the 
operating system, or if you need to call a Standard ROM routine that destroys 
the stack such as the Model 100 TEXT editor, then you will need to really 
understand what is happening. 


The data on the Model 100 operating system is limited to what you need to 


know to get an option ROM running. Operating system routines and callable 
addresses are covered in detail in other publications and I refer you to them. 


The best available are: 


Hidden Powers of the TRS-80 Model 100 by Christopher Morgan. Published 
by the Waite Group. 


Inside the Model 100 by Carl Oppedahl. Published by Weber Systems Inc. 


The ROM2 Manual for the Polar Engineering Debugger now Published by 
Traveling Software. 
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The TRS-80 Model 100 Technical Reference Manual. Published by Radio 
Shack (Catalogue Number 26-3810). 


The Model 100 ROM maps by Robert Covington placed in the Public Domain 
on the CompuServe Model 100 forum as files 100RAM.RDC, and 
100ROM.RCO through 100ROM.RC7. 

The above Model 100 Forum is also a good source for listings of corresponding 
addresses between the Model 100 and the other members of the family that I 
have named. 

[would like to thank Stan Wong and Paul Globman for information that ended 
up in this book, and all the Model 100 SIG members whose enthusiasm knows 
no bounds. 

Good Luck. 

Mo Budlong, 


King Computer Services, Inc. 


Copyright (c) 1988 King Computer Services, Inc. 
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Chapter 2, Basic Principles 


Basic Principles 


The Model 100 is capable of addressing 64K of memory. The first 32K of the 
address space (from 0000H to 7FFFH) are used by the operating system and 
this 32K of code is burned into a Read Only Memory (ROM). This ROM is 
usually called the Standard ROM. 


The next 32K (8000H through FFFFH) of the memory map are allocated to 
RAM storage. Hex addresses 8000H through FSEFH are available to the user 
for program and data storage. 


Addresses FSFOH to the top of memory at FFFFH are reserved by the operating 
system for variable and data storage use. Since the operating system is ROM 
resident, any variable space used by the system must be placed in RAM. This 
area from FSFOH on up is reserved for this purpose. 


So where does the 32K of Option ROM fit in. The option ROM socket is mapped 
into the same memory area as the Standard ROM 0000H to 7FFFH. An 
electronic switch in the Model 100 allows the two ROMs (Standard and Option) 
to be bank switched in and out of circuit. 


The switching cannot be done automatically. The program must know when to 
throw the switch on to get into the Option ROM, and when to throw the switch 
off to get back into Standard ROM. 


First lets define the problems that arise when operating from an Option ROM. 
After you read these please don’t feel swamped by the problem. I’m just trying 
to give you an idea of why the approach that is used in subsequent chapters is 
needed. 


I once had someone finally understand how the option ROM worked who then 
turned and asked me why I was using such indirect methods to call the Standard 
ROM. Hopefully the following summary will give you an idea. 
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1. Calling Standard ROM routines. 


It would be nice if a program could just sit in the Option ROM and never talk 
to the Standard ROM. That way you could throw the switch on at the start of 
the program, and throw the switch off at the end of it. However, the Standard 
ROM provides a great number of routines that are needed to create a 
reasonable program. 


Putting a single character on the screen is a perfect example. If you wanted to, 
you could include in your Option ROM all of the necessary code to control the 
LCD screen, load the LCD control and data registers, keep track of the cur- 
rent cursor position and video status, and line feed and scroll as needed. That 
way you could get a character on the screen without using anything in the 
Standard ROM. 


Of course you would also have to do all the logic for the clock interrupt, polling 
the keyboard, printing characters to the printer, manipulating the 
communications port and next thing you know, your Option ROM would 
include an entire hardware IO sub-system. Obviously the solution is to use the 
Standard ROM routines to handle these services. 


In the Model 100 you can put a character on the screen by placing the character 
in Register A and calling the Standard ROM routine at 4B44H. That routine 
takes care of the whole shop for you including scrolling. 


MVI AX’ 
CALL 4B44H 


The above code will print an ’X’ on the screen from within a .CO program. The 
CO program will reside somewhere in RAM above 8000H and will be calling 
a routine in the Standard ROM. 


The same code will not work in an Option ROM because when the Option 
ROM is enabled, the address 4B44H is in the Option ROM and you will be 
calling something in the Option ROM. 


We should be able to call the Standard ROM if we throw the switch. The switch 
is a bit in port EOH. Ifa value with bit 0 off is sent out this port, the Standard 
ROM is selected. A value with bit 0 turned on will select the Option ROM. 
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We are dealing with calling a Standard ROM routine from an Option ROM so 
let’s try a program ORGed at 3000H in the Option ROM. 


3000 MVI AO ;Bit 0 off 

3002 OUT E0H :Turn on Standard ROM 
3004 MVI AX’ ;Send an ’X’ 

3006 CALL 4B44H ;To the screen 

3009 MVI Al ;BIT 0 on 

300B OUT EOH ;Turn Option ROM back on 
300D sRest of the program. 


It looks great, but it won’t work. Switching from the Option ROM to Standard 
ROM is instantaneous. The OUT EOH instruction at 3002H will switch the 
Standard ROM into circuit, and the next instruction that will be executed will 
be whatever happens to be at address 3004H in the Standard ROM. You can 
guarantee that this will be nothing like your program, and you will send the 
system into pan-galactic space. 


2. The Model 100 interrupts. 


The Model 100 implements four hardware interrupts. All four of these cause a 
call to be issued to an address in low ROM. These interrupts are not under your 
control unless you disable all interrupts. Three of the interrupts are crucial and 
you do not want to have them disabled. 


TRAP 

The trap interrupt is a hardware interrupt and the interrupt is called whenever 
the Model 100 is going in to a power down. This call can be issued at any point 
in a program based on the power down value, or a low battery condition. It is 
equivalent to a CALL 0024H. 


RST5.5 
The 5.5 interrupt is used whenever the Bar Code Reader is used. It is equivalent 
to a CALL 002CH. 


RST6.5 


The 6.5 interrupt is issued when a character is ready to be input from the serial 
line. It is equivalent to CALL 0034H. 
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RST7.5 

The 7.5 interrupt is called approximately every 4 milliseconds. It is equivalent 
to a CALL 003CH. This interrupt is a primary workhorse in the system. The 
clock interrupt updates the system clock, and polls the key board for keystrokes 
as well as taking care of some other house keeping such as blinking the cursor. 
Ifinterrupts are left in a disabled state, the keyboard will not function and the 
system clock will not be updated. 


Itis clear then that while in an Option ROM program, interrupts will be issued. 
At the very least, the clock interrupt must be serviced. 


In order to handle this problem, the option ROM must have routines at 24H, 
2CH, 34H, and 3CH that take care of these hardware generated interruptions. 


3. Getting into the Option ROM. 


This fortunately is the least complicated problem. If you have worked with any 
commercial Option ROM you will probably recall that the Option ROM is 
entered by CALL 63012. This is at hex F624H and the code at that address of 
the Model 100 is: 


F624 DI ;Disable interrupts 

F625 MVI Al Set Bit 0 on 

F627 OUT 0EH ;Turn on the Option ROM 
F629 RST 0 ;Call 0000H 


There are other entry points to the Option ROM, but this one is the preferred 
method. A ROM trigger file can be created on the Model 100 menu such as is 
done with commercial Option ROM programs. Placing the cursor over the 
trigger file name (GldCrd or Frm100 or Lucid) and pressing ENTER does a 
CALL to 63012 (F'624H) so this is obviously intended to be the "Legal" entry 
point to the Option ROM. 


As you can see, the code enables the Option ROM, and calls address 0000H 
in the option ROM. This address should contain a jump to the main program 
in the Option ROM. 


Various addresses in the Option ROM from 0000 to 0047H are used for 
assorted things such as the interrupt routines already mentioned. In addition, 
various Option ROM support routines will reside between 0048H and FFh the 
main program should start probably at 100H. Therefore address 0000H in the 
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Option ROM will contain the instruction JMP 100H and the main program will 
start at 100H. 


You will also notice, that the "Official" entry point to an Option ROM is in high 
memory and this provides the clue to swapping back and forth. The Standard 
ROM and the Option ROM are both mapped to low memory 0000 through 
TFFFH. If you call either ROM by jumping into high memory, switching the 
appropriate ROM into circuit and then jumping to the address in ROM it is 
possible to get in and out of the ROMs without loosing your place in the code. 


We've got the problems somewhat outlined, and a clue to the solution. The next 
chapter tackles these in detail. 
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Option ROM Strategies 


Most of the problems in dealing with Option ROM techniques boil down to 
three areas 


bbs How to call a standard ROM routine from an Option ROM. 


2: How to RETurn to the Option ROM after the Standard ROM 
routine is completed. 


3: How to preserve the stack and registers while doing the above. 


Let’s look at the simple approach first. Assume that somewhere in high RAM 
we have a routine that turns on the Option ROM and another that turns on the 
Standard ROM. 


OPON: 
PUSH PSW Save A register 
MVI Al ;Bit 0 on 
OUT 0EOH ‘Turn on Option ROM 
POP PSW ;Restore the A reg 
RET 

STDON: 
PUSH PSW Save A register 
XRA A sBit 0 off 
OUT QEOH ‘Turn on Standard ROM 
POP PSW ;Restore the A reg 
RET 
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When executing code in the Option ROM, a routine in the Standard ROM can 
be called with the following sequence. 


1. Push the Address in the Option ROM to which you wish to return. 
2. Push the Address of the OPON routine. 

3. Push the Address of the Standard ROM routine that is being called. 
4. Jump to the STDON routine. 


Returning to the example of printing a character on the screen, this sample 
preserves the HL register. This would not be needed for the display character 
routine, but we are working toward a general approach to calling a Standard 
ROM routine with all register’s intact. 


MVI A,X’ 
CALL DSPCHAR 


;Display the Character in Register A. Assumes Register A is 
sloaded 


DSPCHAR: 
PUSH H 3Preserve HL 
LXxI H,DSPCHAR1 sReturn to this address 
XTHL spush it 
PUSH H ;preserve HL 
LXI H,OPON ;Turns on the Option ROM 
XTHL ;push it 
PUSH H ;Preserve HL 
LxI H,4B44H ;Routine in Standard ROM 
XTHL ;push it 
JMP STDON sand go 
DSPCHARI1: 
RET 
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The stack has been set up so that a series of RETurns will navigate the 
program through the routine to turn on the Standard ROM, into the called 
routine, back through the routine to turn on the Option ROM and finally 
back to the correct return address. 


1. The JMP STDON will turn on the Standard ROM. 

2. The RETurn at the end of the STDON routine will pop the address 
4B44H and effectively jump to it. 

3: The RETurn at the end of the routine at 4B44H in Standard ROM 
will pick up the address of OPON as the next address and jump to it. 

4, The OPON routine will turn the Option ROM back on. 

35 The RETurm at the end of the OPON routine will pick up the 


address of DSPCHAR1 and jump to it, and the RETurn here 
will return to the main stream of the Option ROM program. 


While the above works adequately, it is not very practical, because it means that 
every Standard ROM routine that is to be called would have to have a routine 
like DSPCHAR written for it. 


We know we want to CALL via STDON and RETurn via OPON, so if we could 
create an easy way to pass the address of the routine being called in Standard 
ROM and the return address in Option ROM, then one canned routine could 
handle most calls to the Standard ROM. 


A calling convention that can be used is to call a routine and follow the routine 
with the address to call in Standard ROM. 


3000 CALL STDCALL 
3003 DW 04B44H ;Routine in Standard ROM 
3005 aasee ;More program here 


This technique works well because on arrival at STDCALL, the stack contains 
the value 3003H. This is the address of two bytes of memory that contain the 
address of the routine to call. It is possible to retrieve the address from the stack, 
use this to retrieve the address of the routine, increment the address pulled off 
the stack and push it back on as 3005H to establish the real return address. 


Chapter 3, Option Rom Strategies 


STDCALL: g 
POP H ;HL=3003H 
MOV EM 
INX H sHL=3004H 
MOV DM ;DE=4B44H 
INX H ;HL=3005H 
PUSH H ;And back for the return 
LxI H,OPON 
PUSH H ;Will Turn on Option ROM 
PUSH D Stack the Add. to Call 
JMP STDON 3And Go. 


That’s the simple version. Our problem is compounded by the need to preserve 
all registers. It is highly likely that a Standard ROM routine may be called that 
requires values in HL and/or DE and we cannot play fast and loose with the 
values. 


The quickest solution is to find somewhere to save DE and HLin memory. An 
easy solution presents itself because of the Telcom back page. The Telcom 
back page is 320 bytes at address FCCOH. These 320 bytes are used to save the 
’Previous’ page when TELCOM is running. Some are also used by the Model 
100 System menu routine to save an array of pointers to files to display on the 
screen, but most of the time they are not in use, and are a ripe target for saving 
global variables conveniently. 


I must add a warning here that using reserved System RAM for anything is a 
double edged sword. Since Radio Shack has never ’documented’ the system 
RAM, there is always the risk that the usage and addresses could be changed. 
The other side of the coin is that a great many vendors DO use reserved system 
areas and Tandy would be foolish to pull the rug out from under so many third 
party developers. Unfortunately the options are very limited. The only ’legal’ 
place to put RAM that you want to use is below F5FOH using a CLEAR 
command to reserve space. 
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Using the back page, the STDCALL routine becomes: 


HOLDH: EQU OFCCOH 
HOLDD: EQU OFCC2H 


STDCALL: 
SHLD HOLDH ;Caller’s HL 
XCHG 
SHLD HOLDD scaller’s DE 
POP H sHL=3003H 
MOV E,M 
INX H ;HL=3004H 
MOV D,M ;DE =4B44H 
INX H s;HL=300SH 
PUSH H ;And back for the return 
LxI H,OPON 
PUSH H ;Will Turn on Option ROM 
PUSH D Stack the Add. to Call 
LHLD HOLDD sRestore DE 
XCHG 
LHLD HOLDH ;And HL 
JMP STDON ;And Go. 


One last piece of fiddling can be done. As mentioned in a previous section, it is 
unsound to swap into the Standard ROM directly from the Option ROM as you 
don’t know where you are going to land. 


However, such a swap can be done with good results if you can force the swap 
to occur at a point where you will enter the Standard ROM at a known piece of 
code. In fact if the right code could be located, STDON could be assembled at 
the right address in the option ROM and would not have to reside in high 
memory. This exercise is worthwhile because spare bytes that can be used in 
RAM above F5FOH are very hard to come by and the less that needs to be put 
there the better. 


You will recall the STDON routine. 


STDON: 
PUSH PSW Save A register 
MVI A,0 ‘Bit 0 off 
OUT OEOH :Turn on Standard ROM 
POP PSW ;Restore the A reg 
RET 
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At the point the POP PSW is issued, the Standard ROM is enabled. If we could 
find a piece of code in the Standard ROM that did POP PSW RETurn, we 
could ORG the STDON routine at the appropriate address and take advantage 
of suddenly appearing in the Standard ROM. Most of the occurrences of that 
piece of code in the Standard ROM occur at awkward addresses such as 
26C8H. 


In order for STDON to work it would have to be ORGed at 26C3H so that the 
OUT 0OE0H occurred just before 26C8H. This would be silly as it would have 
to appear smack in the middle of any program that was written. A better 
approach would be to find a RET in low Standard ROM, and add an extra 
value to the stack to get to 26C8H as in. 


STDON: 
PUSH PSW ;Caller’s A and flags 
PUSH H ;Caller’s HL 
LXI H,26C8H ;jump address 
XTHL 3On the stack 
XRA A ;Bit 0 Off 
OUT 0E0H sTurn on Std ROM 
RET ;This return in Std ROM. 


When the code hits the RETurn in Standard ROM it picks up 26C8H off the 
stack and jumps to it. At 26C8H the PSW is POPed and a RETurn is issued 
that grabs the address off the stack that was left there by the STDCALL 
routine. A RETurn can be found in the Standard ROM at 8EH, so the code 
ORGed at 85H will cause the necessary alignment. 


ORG 085H 
STDON: 
0085 PUSH PSW ;Caller’s A and flags 
0086 PUSH H ;Caller’s HL 
0087 LXI H,26C8H jjump address 
008A XTHL 3On the stack 
008B XRA A sBit 0 Off 
008C OUT 0E0H ;Turn on Std ROM 
008E RET ;This return in Std ROM. 


The finishing touch to the STDCALL routine is to tidy up the CALLing 
sequence. In the current arrangement a Standard ROM call takes 5 bytes. 


CALL STDCALL 
DW 04B44H 
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The same CALL in a CO program would be 3 bytes 
CALL 04B44H 


It would be nice to get a Standard ROM call from the Option ROM down to 
three bytes as well. Then you could predict the size of a Option ROM program 
while you are testing and debugging it as a CO file. 


The 8085 CPU provides 8 one-byte calls know as the RST calls. You have al- 
ready seen one in the 63012 routine which ends with RST 0. This is a one byte 
instruction that does the same thing as CALL 0. 


The RSTs are 
RST 0 ;= CALL00H 
RST 1 ;= CALL 08H 
RST 2 ;= CALL10H 
RST 3 >= CALL 18H 
RST 4 ;= CALL20H 
RST 3 ;= CALL 28H 
RST 6 ;= CALL30H 
RST 7 ;= CALL38H 


These are designed to provide a quick call (using only one byte) to routines that 
are very common inyour code. The Standard ROM uses these for various things, 
but they are free to be used in the Option ROM for your own purposes. 


At Address 30H (RST 6) we place the command JMP STDCALL and now a 
Standard ROM routine can be called by coding 


RST 6 
DW 04B44H 
We now have a three byte CALL, simple. 


We now have the ability to call almost any routine in the Standard ROM. The 
next thing to handle are the interrupts. 
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Handling Interrupts 


Since interrupt routines are just another form of CALL to the Standard ROM 
it is fairly simple to design an interrupt handler. 


It would be nice to be able to use the STDCALL routine to handle interrupts. 
Unfortunately because the HL and DE registers are saved at fixed locations it 
is not possible. If an interrupt occurred in the middle of processing a Standard 
ROMcall, the interrupt logic would take over and re-use HOLDH and HOLDD 
for its own HL and DE registers, and you would loose the values saved by 
STDCALL for the CALLed routine. 


If register values are to be saved as globals, it is necessary to have two versions 
of STDCALL, one for calls and one for interrupts. 


An INTCALL routine would have to save its HL and DE registers at two more 
global locations. Although the code for INTCALL would otherwise be identical 
to STDCALL. 
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Once again we resort to the TELCOM back page for global space. FCCO 
through FCC3 are used for HOLDH and HOLDD so the next two locations 
will have to begin at FCC4H. 


INTH: EQU OFCC4H 
INTD: EQU OFCC6H 


INTCALL: 
SHLD  INTH ;Caller’s HL 
XCHG 
SHLD INTD ;Caller’s DE 
POP H ;(HL) = Routine to Call 
MOV E,M 
INX H 
MOV D,M ;DE = Routine to Call 
INX H ;HL= Return Address 
PUSH H 
LxI H,OPON sreturn through OPON 
PUSH H 
PUSH D sReturn Address 
LHLD INTD s;Caller’s DE 
XCHG : 
LHLD  INTH s;Caller’s HL 
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Four interrupt routines will be needed to handle each of the hardware 
interrupts. 


INTRAP: 
CALL INTCALL 
DW 0024H 
RET 

INTSS: 
CALL  INTCALL 
DW 002CH 
RET 

INT65: 
CALL INTCALL 
DW 0034H 
RET 

INT75: 
CALL INTCALL 
DW 003CH 
RET 
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An finally the Option ROM would have to have jumps set up at 24H, 2CH, 
34H and 3CH to jump to each of the respective routines after disabling 


interrrupts. 
ORG 24H 
DI 
JMP INTRAP 
ORG 2CH 
DI 
JMP INTSS 
ORG 34H 
DI 
JMP INT65 
ORG 3CH 
DI 
JMP INT75 


Only one final issue needs to be taken care of. The question of the OPON 
routine. It has to be placed somewhere in high memory at an address that will 
not be corrupted. The next chapter covers this last piece of the puzzle. 
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The Secret of Address 40H 


The OPON routine needs to be copied into high RAM in order to be able to 
operate. 


It will have to be coded into the Option ROM and then somehow copied to the 
high memory address. 


The Model 100 provides a mechanism to handle this problem nicely. 


There is a method available to automatically install an Option ROM. When the 
Model 100 is powered up, one of the steps it goes through is checking to see if 
an Option ROM is plugged in. It does this by calling a routine at F605H. 


This routine turns on the Option ROM and copies 8 bytes from Address 40H in 
the Option ROM to Address FAA4H. It then inspects the two bytes at FAA4H 
and FAASH and tests if there values are ’A’ and ’B’. If they are, then the system 
assumes that an option ROM exists and uses the remaining 6 bytes to create a 
ROM trigger file on the main menu. For example 


ORG 40H 
DB *ABHello’ 


would cause ’Hello’ to automatically be entered on to the main menu asa ROM 
trigger file. ROM Trigger files are covered in detail in a later chapter. 


Once the trigger file is created (or not), the eight bytes originally copied to 
FAA4H are left alone. The OPON routine is 7 bytes long, so this is the perfect 
storage location for the routine. 


Instead of using the routine to install the trigger file, we can use it to install the 
OPON routine. ORG a copy of OPON at address 40H, and the Model 100 will 
automatically place it at FAA4H for you as long as power is switched off and 
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then on. Power should be switched off to install an Option ROM anyway so 
this presents no real problem. 


OPON: EQU OFAA4H 


ORG 40H 

OPONIMG: 
PUSH PSW ;Save A register 
MVI Al ;Bit 0 on 
OUT 0E0H :Turn on Option ROM 
POP PSW sRestore the A reg 
RET 
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Putting It Together 


We now have all the routines needed; and a collection of rules about organizing 
the routines into the ROM. 


de Address 0000 must contain a jump to the main program. 

2. The RST 6 address (30H) must contain a jump to the STDCALL 
routine. 

3: Each of the interrupt addresses (24H,2CH,34H and 3CH) must 
disable interrupts and jump to the INTCALL routine. 

4. The STDON routine must be ORGed at 85H. 

5. A Copy of OPON must be orged at 40H. 


The jump at address 0000 could either be to address 100H, or to a symbolicname 
that is the entry to your code. 


The following listing is an example with comments on each of the two techniques 
that bring all of the information together into one header file. 


Rather than use a lot of ORG statements, the listing uses DB 0 padding to ensure 
that all addresses line up correctly to handle the RST and hardware interrupt 
commands. 


The area between 47H, the end of the OPON image and 85H the address of 
STDON is free space. As much of the support routines as possible have been 
placed in this space. It is possible to try to cram too much code between 47H 
and STDON, When this happens, STDON will be correctly ORGed at 85H 
because of the explicit ORG statement, but it will overwrite any code in the 
support routines that extended beyond 85H. No Option ROM burner will be 
able to handle this. 
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If you want to change the listing please note that the values from 0000H 
through 0047H must be changed very carefully to ensure that address integrity 
is maintained. 


The RST 0 routine increments the stack pointer twice. This is to get rid of an 
extra return address left on the stack by the RST 0 at the end of the routine at 
63012. 


The listing includes the PUBLIC assembler directive which is used by the 
RMACassembler for relocatable linking. You may remove it if your assembler 
does not allow two or more files to be linked together. 


Chapter 6, Putting it Together 


Listing 6-1 ROMHD1.ASM 


‘Main header file for an Option ROM program. If using a locating linker 
‘this should be ORGed at 0000H and should be the first file in the link 
:stream. Requires Global space at FCCOH ;This sample lets the system 


PUBLIC OPON 
OPON: EQU OFAA4H 


;Globals on the Telcom Back Page to temporarily hold HL and 
;DE registers during a CALL to Standard ROM, or during an Interrupt. 


HOLDH: EQU OFCCOH 
HOLDD: EQU O0FCC2H 
INTH: EQU OFCC4H 
INTD: EQU OFCC6H 


;ORGed at Zero by the Linker, this is the entry point to a program called 
;from the main menu by pressing ENTER over the Trigger File 
sor by CALLing 63012 from BASIC. 


RST0?: 
INX SP 
INX SP 
JMP 100H 
sor JMP PROGRAM 
DB 0,0,0 
RST1?: sNot used 
RET 
DB 0,0,0,0,0,0,0 
RST2?: ;Not used 
RET 
DB 0,0,0,0,0,0,0 
RST3?: sNot Used 
RET 
DB 0,0,0,0,0,0,0 


Continued/ 
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RST4?: sNot Used 
DB 0,0,0 


Replaces the trap interrupt and sets up a call to the 
;trap interrupt in Standard ROM. 
TRAP?: 


DI 
JMP INTRAP 
RSTS5?: sNot Used 
RET 
DB 00,0 
sReplaces the 5.5 interrupt and sets up a call to 5.5 in Standard ROM 
sRST55?: 
DI 
JMP INTSS 
RST 6 used as short call to a Standard ROM routine. 
RST6?: 
JMP STDCALL 
DB 0 
‘Replaces the 6.5 interrupt and sets up a call to 6.5 in Standard ROM 
RST65?: 
DI 
JMP INT65 
RST7?: sNot Used 
RET 
DB _ 00,0 
sReplaces the 7.5 interrupt and sets up a call to 7.5 in 
;Standard ROM 
RST75?: 
DI 
JMP INT75 


Continue 
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;Based on a byte count, We are now at address 40H. The 8 bytes at 40h are 
s;copied to FAA4H during power up. An image of the OPON routine copied 
;to FAA4H by the power up logic. 


OPONIMG: 
PUSH PSW 
MVI Al 
OUT OEOH 
POP PSW 
RET 
DB 0 


‘The STDCALL routine allows a program running in the the 
;Option ROM to call and return to an address in the Option ROM 
;Syntax is to use a RST 6 plus the address to be called. 


; RST 6 
2 DW 04B44H 
STDCALL: 
DI 
SHLD HOLDH ;Caller’s HL 
XCHG 
SHLD HOLDD ;Caller’s DE 
POP H ;(HL) = Routine to Call 
MOV E,M 
INX H 
MOV D,M ;DE = Routine to Call 
INX H s;HL=Return Address 
PUSH H 
LXI H,OPON ;return through OPON 
PUSH H 
PUSEL.. 1): ‘Return Address 
LHLD HOLDD ;Caller’s DE 
XCHG 
LHLD HOLDH ;Caller’s HL 
EI 


Continued/ 
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;Routines for each of the hardware traps. 


INTRAP: 
CALL INTCALL 
DW 0024H 
RET 

INTSS: 


CALL = INTCALL 
DW 002CH 


RET 

INT6S: 
CALL = INTCALL 
DW 0034H 
RET 

INT75: 
CALL = INTCALL 
DW 003CH 
RET 


-This routine must be ORGed at 85H. Ensure the the previous 
;Code does not overlap into 85H 


ORG 85H 

PUBLIC STDON 
STDON: 

PUSH PSW 

PUSH H 

LXI H,26C8H. 

XTHL 

XRA A 
OPEXIT 

OUT 0E0H 

RET 


Continue 
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Listing 6-1 ROMHD1.ASM (continued) 


:The INTCALL routine allows a program running in the Option ROM to call 
san interrupt routine. Syntax: CALL INTCALL plus the address to be called. 


CALL = INTCALL 


: DW 24H 

INTCALL: 
SHLD  INTH ;Caller’s HL 
XCHG 
SHLD  INTD ;Caller’s DE 
POP H ;(HL) = Routine to Call 
MOV E,M 
INX H 
MOV D,M ;DE =Routine to Call 
INX H ;HL = Return Address 
PUSH H 
LXI H,OPON sreturn through OPON 
PUSH H 
PUSH D ;Return Address 
LHLD = INTD ;Caller’s DE 
XCHG 
LHLD  INTH ;Caller’s HL 


JMP STDON 


:Two alternate methods may be used here. 
‘The first is to use a JMP 100H in the RSTO routine and and 
;ORG 100H statment here. 
‘The second would be to use a JMP PROGRAM statment in the 
;RSTO routine and place a 
;PROGRAM: label here without the ORG statement 
ORG 100H 
PROGRAM: 
;Main Logic for your program begins here 


END 
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An Option ROM Program 


We have the basics, so lets try a simple program. 


This program will clear the screen. Print "Hello World" on the screen followed 
by "Press Any Key". The program waits for the user to press a key and then 
returns to the Model 100 menu. 


You will notice one odd thing about the program. The Model 100 has a Standard 
ROM routine to print a null terminated character string to the LCD. The normal 
process for calling this routine is to load the HL register with a pointer to the 
string and then call SAS8H in the Standard ROM. 


LxI H,MSG 
CALL 5A58H 
JMP NEXT 
MSG: DB "Hello World’,O 


sibee continue here. 


This program does not use this call, and I deliberately chose this example to 
illustrate one of the possible pitfalls of Option ROM programming. 
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The Option ROM version of this code would be: 


LxXI H,MSG 
6 


DW SAS8H 
JMP NEXT 
MSG: DB Hello World’,O 


NEXT: 
eevee continue here. 


The problem is that "Hello World’ exists in the Option ROM, but not in the 
Standard ROM. Upon Entry to the SA58H routine, HL will contain the correct 
value, but a correct value for the Option ROM. Since the Option ROM is not 
enabled while 5A58H is executing, HL will point to some garbage in the 
Standard ROM. 


It is important to remember for all routines that require a register to point to 
something, that whatever it is pointing to must be in RAM. That is the only 
way the Standard ROM will be able to access it. 


The result is that it is necessary to write a version of 5A58H for the Option 
ROM. 


The second oddity is that the main routine @MAIN? does not appear to end 
properly. It doesn’t do a RETurm or anything sensible. 


The call to the Standard ROM routine 5797H which is the Model 100/102 main 
menu routine is a non-returning call. The 5797H routine clears up the stack 
and jumps to the menu display. 


This is an acceptable exit method for most Option ROM programs. 
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However it would not be workable for an Option ROM chip designed to be used 
as a support chip containing routines that were to be callable from BASIC. Any 
entry to the chip from BASIC would result in an exit to the Model 100 menu. 
The simple way to handle this is to replace the code at EXIT with: 


EXIT: 
EXTRN STDON 
JMP STDON. 


STDON has been declared a PUBLIC in the ROM header files, and if you check 
the state of the stack you will find that at EXIT, the address on the stack is the 
return address to whoever CALLed 63012. A jump to STDON will turn the 
Standard ROM on and issue a RETurn that should put you back where you 
started. 


If you are using a system that allows linking, then ROMHD1 and this file can be 
assembled separately and linked. 


For a non-linking assembler remove the PUBLIC assembler directives and 
append this code to the end of ROMHD1 and assemble. 


In either case the version of ROMHD1 to use is the one that does a JMP 100H 
in the RSTO routine. 
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Listing 7-1 HELLO.ASM 
ORG 100H 
PUBLIC @MAIN? 
@MAIN?: 
EI ;Restore Interrupts 
RST 6 ;Call Standard ROM 
DW 04231H ;Clear the Screen 
LxXI H,MSG1 ;First Message 
CALL DSPSTR ;3To the LCD 
LxXI H,MSG2 32nd Message 
CALL DSPSTR ;To the LCD 
RST 6 ;Call Standard ROM 
DW 012CBH ;Wait for a key 
EXIT: 
RST 6 ;Call Standard ROM 
DW 05797H ;System Menu Routine. 


:Routine to Display a Null terminated string to the LCD 
sImitates the Model 100 SAS8H routine 


DSPSTR: 
MOV A,M ;Get the Character 
ORA A sReturn if NULL 
RZ 
PUSH H Preserve pointer and 
RST 6 ;Call Std ROM 
DW 04B44H ;Display Character 
POP H sIncrement the 
INX H ;Pointer and 
JMP DSPSTR 3go again 

MSG1: DB Hello World’,13,10,0 

MSG2: DB *Press Any Key’,13,10,0 
END 
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As in any BASIC call it is possible to load the HL register with a value, and the 
called routine will receive it. The A register however is lost by the routine at 
63012 as it forces a 1 into the register. 


F624 DI ;Disable interrupts 

F625 MVI Al Set Bit 0 on 

F627 OUT 0EH ;Turn on the Option ROM 
F629 RST 0 ;Call 0000H 


Even so it would be possible to create an Option ROM that dispatched to various 
routines based on a value in the HL register. Such a ROM could be called from 
BASIC as in 


CALL 63012,,1 
CALL 63012,,2 
CALL 63012,,10 or whatever 


The code in the Option ROM would look something like this. 


ORG 100H 

@MAIN?: 
DAD H ;sDouble H 
LXI D,TABLE . ;Start of routine table 
DAD D ;Address of a routine 
LXI D,EXIT ;Return through here 
PUSH D 
MOV E,M 
INX H 
MOV D,M ;Routine in DE 
XCHG ;into HL 
PCHL ;Jump to it 

EXIT: 
EXTRN STDON 
JMP STDON 

TABLE: 


DW ROUTI 
DW ROUT2 
DW ROUT3 
ete. etc. 


Each of the ROUTINES ROUT1,ROUT?2 etc. would end with a RETurn 
which would bring you back to EXIT and then eventually back to BASIC. 


Chapter 8, ROM Ready 


ROM Ready 


This is an awkward subject to cover because of the variables involved. 
1. There are a large number of ROM burners on the market. 


2. Depending on the assembler you are using, the code may be ready 
to go straight to the ROM burner, or it may require conversion. 


I will deal with a couple of general areas, but the details will have to be up to 
you depending on your assembler, and ROM burning equipment. 


Most ROM burners will accept a file format known as the Intel Hex format 
developed by Intel. There are other formats developed by Motorola and other 
companies, but Intel Hex is very widely accepted. 


The Intel Hex format is an ASCII file that uses ASCII hex characters to 
represent the byte values and memory addresses to be used. Intel Hex is not 
exclusively designed for ROM burning, it is a convenient way to convert program 
data and the addresses to which the data is to be loaded into a 7 bit ASCII text 
format. 


The format is very versatile. The original CP/M ASM assembler, and the current 
CP/M MAC assembler both output Intel Hex formatted files. A large number 
of cross assemblers (say for developing 8080 code on an IBM PC or UNIX 
system) use Intel Hex as a default or optional output format. The very popular 
public domain CPM Emulator and disassembler Z80MU will accept Intel Hex 
files as input and of course so will most ROM burners. 


There are versions of the Intel Hex format that cater to machines that have a 
larger addressing space than 64K, but we will deal here with the 64K format. 
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Asample Intel Hex file could be viewed with any text editor and would look 
something like this. 


310E678003721EBE6CDE617CD1EGECDF1E6FE1ACACO 
: 10OE68800BDE63E2EE72116E723CDD4E6D5C1CDD48D 
: 10OE69800E653CDD4E6EB2214E7EB2323AFB1C3B79F 
: 1OE6A8 00E6CDD4E6E52A14E773232214E7E10DC288 
: LOEGB8 OOAQE6C3 82E6CD0B6ECDCB6EC9DE30FEOAG6D 
: LOE6C800D8DE07C9373F171717175FC97E23FE1A09 
: L1OE6D8 OOC2DDE65FC9CDC4E6CDCCE67E23CDC4E677 
: LOE6E8 00835FC938384E314500CDOB6E2116E7CD12 
: LOE6F8007E6DFEODCAF7 EGFEOACAOEE7 FELACAOEBE 
: OEE70800E77723C3F7E6F5CD1EGEF1C90000DA 
:0000000000 


The following description uses the first record of the above example which is 
broken into its component parts below. 


10 E678 00 3721EBE6CDE617CD1E6ECDF1E6FE1ACA CO 


The first byte of each record is the ASCII code for *:’. 


Bytes 2 and 3 contain the ASCII codes for two hex digits that are the number 
of data bytes in this record. In this case 10H or 16 decimal. 


Bytes 4 through 7 contain a hex ASCII representation of the address in which 
to poke (or burn) the data. 


Bytes 8 and 9 are always set to ’0’. 


Starting at byte 10 the 16 data bytes are represented as pairs of hex ASCII 
digits. In the above example the data bytes are 37H, 21H, EBH, E6H, CDH, 
E6H, 17H, CDH, 1EH, 6EH, CDH, F1H, E6H, FEH, 1AH, and CAH. 


The last two bytes are a checksum calculated by adding all the pairs of bytes 
together (including the count, address, and data bytes) dividing the result 
modulo 100H and subtracting this result from 100H. 
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The following describes the steps for the above record. 


di Add all bytes together. 


10+ E6+78+00+37+21+EB+E6+CD+E6+17+CD+1E+6E+CD+ 
F1+E6+FE+1A+CA 


= B40 
2. Divide this modulo 100H (which) is the same as masking off all 
but the last two values. 
B40H MOD 100H = 40H 
ah Subtract this from 100H and the result is the checksum. 
100H - 40H = CO 


This value is tacked on the end of the record as two more hex ASCII bytes. 


This record format is repeated over and over until all the data and addresses 
have been specified. Note that the format allows for records of less than 16 data 
bytes as illustrated in the second to last record in the above file. 


The last record is always 
:0000000000 
For a ROM burner this is usually the signal to stop burning. 


You will notice an immediate drawback to this format. It creates a huge file 
which will become a real bear if you are developing on the Model 100. Every 16 
bytes of code are expanded into a 45 byte record including the carriage return 
and linefeed at the end of the record. An 8K ROM would produce about a 23K 


Intel Hex file. 


Fortunately most ROM burners will let you bite off smaller chunks and send 
them. 
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Most assemblers on the Model 100 create the output file at the ORG address 
you have specified. If you ORG a file at 0 the assembler will attempt to poke 
the resulting code into addresses starting at 0. I have not explored all of the 
assemblers available but you will need one that allows you to org a file at 0 but 
poke the resulting code into high memory, or one that directly creates a CO 
file. 


Once the code is in RAM, a program can be used to create an Intel Hex file 
either as a .DO file, or as a COM: file that can be sent directly out the COM: 
port presumably to a ROM burner. 
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ROM vs .CO 


It is frequently desirable to test a program as a .CO program to ensure that is 
works before burning an Option ROM. 


If you have an assembler that allows for macros it provides a mechanism that 
makes it very easy to create a program that can be assembled to runasa CO file, 
and then re- assembled and run as a ROM file. 


There are three types of activities that must be resolved as they are different 
depending on whether the program is in a .CO file or in an Option ROM. 


1. A Call to a Standard ROM routine. 
2. A RETurn to the Standard ROM as in the example in chapter 7. 
38 A Jump to a Standard ROM address. In the earlier HELLO.ASM 


program in chapter 7 the sample call to 5797H is effectively a jump, 
and would have been better expressed as a jump to that address. 


Calls are by far the most common, and some effort was made to keep the size 
of a Call from option ROM the same size as a call from a .CO file. 


With RET’s and JMP’s it is not really worth the effort unless you are doing ex- 
tensive work with the System Hooks; or unusual Standard ROM routines that 
mess with the stack. 


A RETurn from the Option ROM is shown in the previous section though not 
labelled clearly as such. 


EXTRN STDON 
JMP STDON 
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Since the assumption is that the value on the stack is the return address in 
Standard ROM then a simple jump to STDON will act like a return. 


A jump is a little less straight forward as STDON will not work without an 
address on the stack and it may be necessary to preserve a register. 


PUSH H 
LxI H,5797H 
XTHL 


EXTRN STDON 
JMP STDON 


As mentioned, you will normally only have one JMP or RETurn to the 
Standard ROM and the size of these pieces of code should not cause a problem. 


Now we can set up equivalencies. 


.CO program ROM Program 
CALL ADDRESS RST 6 
DW ADDRESS 
RET JMP STDON 
JMP ADDRESS PUSH H 
LxI H,ADDRESS 
XTHL 


JMP STDON 


Enter the MACRO. RMAC is a macro assembler that will let you define your 
own commands. If every CALL RET or JMP to a Standard ROM routine is 
coded as a macro instead of using the designated opcode, it is possible to 
redefine the macro depending on assembly conditions. 


Listing 9-1 is a version of HELLO.ASM that uses this macro approach. I[ROM 
on the first line is EQUated to 1, the code will assemble with Standard ROM 
CALLs RETurns and JMPs. 


If ROM on the first line is EQUated to 0 the code will assemble normal 
CALLs, RETurns, and JMPs. 


Chapter 9, ROM vs. CO 


a a 


Listing 9-1 HELLO.ASM (with macros) 


ate = erties Mn 


ROM: EQU 0 


if ROM 

SCALL MACRO ADDRESS 
RST 6 
DW ADDRESS 
ENDM 


SRET MACRO 
EXTRN STDON 
JMP STDON 
ENDM 


SJMP MACRO ADDRESS 
EXTRN STDON 
PUSH H 
LXI H,ADDRESS 


XTHL 
JMP STDON 
ENDM 


else 


SCALL MACRO ADDRESS 
CALL ADDRESS 
ENDM 


SRET MACRO 
RET 
ENDM 


SJMP MACRO ADDRESS 
JMP ADDRESS 
ENDM 


endif 
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Listing 9-1 HELLO.ASM (continued). 


PUBLIC @MAIN? 
4 


@MAIN' 
SCALL 04231H sClear the Screen 
LxI H,MSG1 ;First Message 
CALL DSPSTR 3To the LCD 
LxI H,MSG2 32nd Message 
CALL DSPSTR ;To the LCD 
SCALL 012CBH ;Wait for a key 
EXIT: 
SJMP = 05797H ;System Menu Routine. 


;Routine to Display a Null terminated string to the LCD 
sImitates the Model 100 SAS8H routine 


DSPSTR: 
MOV A,M ;Get the Character 
ORA A ;Return if NULL 
RZ 
PUSH H ;Preserve pointer and 
SCALL 04B44H ;Display Character 
POP H ;Increment the 
INX H 3Pointer and 
JMP DSPSTR 3go0 again 

MSG1: DB ’Hello World’,13,10,0 

MSG2: DB ’Press Any Key’,13,10,0 
PUBLIC PRGEND 

PRGEND: EQU $ 
END 


This provides a powerful tool for Option ROM development. Code and test 
as much as you want in RAM. Then add the ROMHD1 code and then change 
the ROM EQUate and re- assemble (and link if necessary) to create a ROM 
image. 
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ROM Trigger Files 


I have mentioned ROM trigger files several times, and it is time to deal with 
them. 


The Model 100 supports 5 basic file types in the directory. The directory is 
located at F962H and contains space for 27 files. The Model 100/102 can display 
only 24 files, but because the system maintains three invisible files a total of 27 
directory entries are needed. 


A directory entry consists of 11 bytes. The first byte holds the file type (more on 
this in a moment). The next two bytes contain the starting address in memory 
of the file, and the last 8 bytes contain the file name with the name left justified 
and space padded, and the extension in bytes 7 and 8. 


The first five directory slots are filled with the Standard ROM programs, BASIC, 
TEXT, TELCOM, ADDRS, and SCHEDL. The next three are used by the 
invisible files. The current un- saved BASIC program, the Paste buffer file, and 
the EDIT file. 


The next directory slot begins at F9BAH. This is the first ’free’ slot directory. 
There are a total of 19 free slots. 


The file type bytes for each entry are one byte in which the high order four bits 
identify the file type, and the low order four bits are used (2 of them) by the 
system for house keeping. 
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The four low order bits are used as follows: 

Bit 0 Turned on during various directory activities to indicate that this 
file has been processed by the activity. Turned off again for all 
files at the end of the routine. 


Bit 1 Turned on in DO files whenever the file is open. Turned off again 
at a close. 


Bit 2 Not used as far as I can tell. 

Bit 3 Turn this on to make a file invisible. The entry continues to 
appear in the directory, but is not displayed on the System 
Menu or by the BASIC FILES command. 

The high order four bits are set as follows. 

80H BASIC file. 

AOH .CO file 

BOH Standard ROM file (BASIC, TEXT, TELCOM etc.) 

COH Text .DO file 

FOH ROM trigger file. 


You should be familiar with the behavior of the first four file types, so lets 
deal with the trigger file. 


The trigger file does not really exist as a file. It is only a directory entry. When 
the cursor is placed over a ROM trigger file and ENTER is pressed, the 
system does a CALL 63012, the exact same call to enter an Option ROM from 
BASIC. 


The two bytes that contain the starting address for the file should be set to 
OFFFFH in a ROM trigger file. 
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In order to design a routine to install a ROM trigger file on the MENU, it is 
only necessary to remember a few things. 


1. 


2. 


A ROM trigger can be legitimately placed in any free slot. 


The name can be up to 6 characters but unused spaces in the 
directory name should be filled with NULLS. This means at 

least two NULLS must be appended to fill all eight positions 
of the name. 


The type byte must be FOH. 
If a ROM trigger exists from a previously installed Option ROM 


it is much better to replace it than to use up a directory slot 
with another trigger. 


The simplest way to describe the process is with listing 10-1 which will install a 
trigger keeping all these things in mind. 


This routine uses the macros described in the previous section, but they are not 


included. 


The calling sequence for TRGINS would be placed at the top of the main logic 
so that installation occurred as the first thing. 


DSEG 


ORG 100H 


“PUSH H 


LxI H,ROMNAME 
CALL TRGINS 

POP H 

a rest of the logic here 


ROMNAME: DB ’Hello’,0 


This has the advantage that it self installs even over another ROM trigger. It of 
course also installs over itself on each entry, but it takes very little time, and can 
just be considered part of the overhead of getting into an option ROM. 
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Listing 10-1 TRGINS routine. 


sModel 100 Routines used in TRGINS 

;Entry HL points to a directory entry. 

sExit: Zset = no more entries 

: else 

HL points to the next directory entry with an 
: active file. 

NXTDIR: EQU 020D5H 


;Locate an empty directory slot. 
;Entry none 

;Exit HL points to a free slot. 
FREDIR: EQU 020ECH 


PUBLIC TRGINS 
TRGINS: 
;Installs a 6 or less character name as a ROM trigger 
sfile on the Model 100 directory. 
;Entry: | HL points to 6 character string to use for the name 


Exit: None 
PUSH H ;Save New File name. 
CALL FOTRG_ ;Find an old trigger file 
POP D ;File Name 
JINZ TRGINS1;If found intall over it. 
PUSH D selse 
SCALL FREDIR ;Find an empty Slot. 
POP D jand install 
TRGINS1: 
MVI M,0F0OH : 
INX H ;Step past start bytes 
MVI M,0FFH_ ;Set Start to OFFFFH 
INX H 
MVI M,0FFH 
INX H 
MVI C8 ;and copy in the name 


Continue 


10 -4 


Chapter 10, ROM Trigger Files 


Listing 10-1 TRGINS routine. (continued) 


TRGINS2: 
LDAX D 
MOV MA 
INX H 
ORA A ;Stop incrementing when NULL 
JZ TRGINS3 ;encountered 
INX D ; 
TRGINS3: 
DCR Cc 
JNZ TRGINS2 
RET 
;FOTRG 


Searches the directory for an already existing trigger 
;file and returns a pointer to it in HLif found. 


;Entry: None 

sExit: Z set if none found 

: else 

: HL points to the directory entry 

FOTRG: 

H,OF9BAH-11 ;Free dir - 1 entry 

FOTRG1: 
SCALL NXTDIR ;Next Live File 
RZ sno file found 
MOV A.M sis ita ROM Trigger 
CPI OFOH 
JINZ FOTRG1 3No - Go again 
ANA A : ;Clear Z flag 


RET 


i UE E EEE EEE See=? 
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Variable Space 


This is trickier than it seems at first glance. In a .CO program, variables can be 
embedded in the code. Since variables will be in RAM they are no problem. In 
a ROM it is pointless to embed variables in the code because they become 
’constants’ once the ROM burner has had its way with them. 


Obviously it is necessary to re-think the method of handling variables. 


If the program is small and does not require much space, then you can simply 
place all the variables in the TELCOM back page. The ROMHD file uses 8 
bytes, but that leaves 312 bytes available from FCCAH through FDFFH. Don’t 
go above this top address, as FEOOH is the beginning of the Video RAM and 
storing data here will cause it to appear on the screen, and to be destroyed by 
screen IO, 


This area of RAM is larger than you would think if you realize that it will hold 
a 256 byte buffer and still leave room for the storage of 28 words (or 56 bytes). 


Their will be times when you just need more space. 


In order to handle this we have to borrow a page from ’C’ and other stack 
oriented languages, and allocate space on the stack for the variables. 


As an example assume a program requires a 256 byte buffer, a 100 byte buffer 
and a 200 byte buffer. 
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In a normal .CO program this would simply be allocated in the program and 
passed to a routine by loading HL with a pointer to each buffer. 


AROUTINE: 
LxI H,BUFR256 

CALL ROUTINE256 ;Do something to it 

LXI H,BUFR100 

CALL ROUTINE100 ;Do something to it 

LxI H,BUFR200 

CALL ROUTINE200 sDo something to it 


RET 
BUFR256: DS 256 
BUFR200: DS 200 
BUFR100: DS 100 
END 


This will not work in a ROM program, and there is not enough room on the 
TELCOM back page for this much storage. 


There are two types of variables in a program. Temporary and permanent. 
Temporary variables are used only ina routine and discarded at the end of the 
routine. An example would be loading the BC register with a count to be 
performed. The contents of BC are irrelevant and discarded after the count is 
done. Most routines load registers with these temporary variables and they are 
never stored in memory. Permanent variables are globals that are used at 
enough different places in the program to warrant storage of their own in 
memory. 


Assembly language programmers tend to create all variables as globals even 
when they are only used in one routine. 


First lets look at globals. In the above example if the three buffers were globals, 
they could be created on the stack, if they were created at the highest level of 
the program and then deallocated before leaving the program. 
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In order to make them globally accessible, pointers to them could be set up on 
the TELCOM back page. 


BUFR256: EQU OFCCAH 

BUFR200: EQU OFCCCH 

BUFR100: EQU OFCCEH 
ORG 100H 

PROGRAM: 


Allocate 556 bytes on the stack 
LxI H,-556 —__;-(256 + 100 +200) 


DAD SP ‘From Current Stack pointer 
SPHL ;Create the Space 

SHLD BUFR256;First Buffer 

LxI D,256 

DAD D 

SHLD BUFR200;Second Buffer 

LXxI D,200 

DAD 


D 
SHLD  BUFR100;Third Buffer 
;All buffers can be accessed with LHLD instead of LXI 


LHLD H,BUFR256 
CALL ROUTINE256 ;Do something to it 
LHLD H,BUFR100 
CALL ROUTINE100 Do something to it 
LHLD H,BUFR200 
CALL ROUTINE200 :Do something to it 


;Must Square up the stack before exiting 


LXI H,556 

DAD SP 

SPHL - 

JMP STDON ;Return to the system 


Local variables may be created the same way, but there is no need to save a 
pointer at a global location. 


a 
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Lets take a trivial example. Assume that you have a routine called GETSTR 
that is passed a pointer to a buffer in HL and a length in DE. It allows the user 
to enter that many characters and returns them in the buffer with a null 


terminator. 


Asecond routine DSPSTR will display the string. After the user has entered 
the string, and it has been displayed, it is no longer needed. A routine that 
accessed these two routines might look something like this. 


AROUTINE: 


;Allocate 41 bytes on the stack. 
LXI 


square up the stack 


LXI 
DAD 
SPHL 
RET 


H,-41 

SP 

H ;Save pointer to buffer 
D,40 ;Allow 40 byte entry 
GETSTR ;Get entry 

H ;Retrieve ptr to Buffer 
DSPSTR ;Display it 

H,41 

SP 


The stack allocation method is so smooth that you can even save registers and 
restore them again above and below the stack manipulation. 
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AROUTINE: 
PUSH H 
PUSH D 
;Allocate 41 bytes on the stack. 
LXI H,-41 
DAD SP 
SPHL 
PUSH H ;Save pointer to buffer 


LxI D,40 ;Allow 40 byte entry 
CALL  GETSTR ;Get entry 

POP H sRetrieve ptr to Buffer 
CALL  DSPSTR ;Display it 


;Square up the stack 
LxI H,41 
DAD SP 
SPHL 
POP D 
POP H 
RET 


The sample entry and exit logic can be placed in a macro to allow speedier 
coding. 


ENTRY MACRO BYTES 
LXI H,-BYTES 
DAD SP 
SPHL 
ENDM 

and 


EXIT MACRO BYTES 
LxI H,BYTES 
DAD SP 
SPHL 
ENDM 
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Since many functions require a return value, and HL is the best register for 
this, HL could be preserved on EXIT by storing it at HOLDH. This variable 
is only used during calls to the Standard ROM which not occur during an exit. 


EXIT MACRO BYTES 
SHLD HOLDH 
LXI H,BYTES 


DAD SP 
SPHL 

LHLD HOLDH 
ENDM 


The orignal version of AROUTINE can now be written. 


AROUTINE: 
ENTRY 41 
PUSH H ;Save pointer to buffer 


LXI D,40 ;Allow 40 byte entry 
CALL  GETSTR ;Get entry 


POP H ;Retrieve ptr to Buffer 
CALL DSPSTR ;Display it 

EXIT 41 

RET 
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Search and Replace 


Included in this chapter is a complete listing of aworking Option ROM program 
that does allows search and replace on text files. 


Brief outline of the program. 


WB The program checks that there is enough stack space to run. 

It installs itself with the ROM Trigger file name of "SandR". 
3: A search is done of the Model 100 directory for all visible .DO files. 
4, Their names are displayed on a a menu of .DO file names similar 


to the Model 100 systems menu. 


2 The left and right arrow keys allow the bar cursor to be moved 
around on the screen. 


6. F8 allows the user to exit. 

Th If ENTER is pressed then the file named under the cursor is 
used for a search. 

8. The user is prompted for up to 20 characters of search text. 
If nothing is entered the program loops back to 3. 

9. The user is prompted for up to 20 characters of replacement text. 
Ano entry here is legal and will cause a search and replace 
with nothing (delete). 

10. The program searches the file for the text. 
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abe Each time an occurence is found, the search string is deleted 
from the text file. 


12. A hole is made in the file the size of the replacement string and 
the replacement is copied into the file. 


13. The search resumes at the next position in the file after the 
replace string. 

14. When the end of file is encountered the search discontinues 
and the directory is reorganized to ensure that pointers are 
correctly set up. 


I cannot guarantee that the program is bug-free. It is intended to illustrate the 
workings of an Option ROM program and how to use the technique of 
allocating local variables on the stack. 


Itis certainly not a polished program. It would be far better to display a portion 
of text from the file and ask the user whether to replace or not. The RPL 
routine could be coded much more efficiently taking advantage of the fact that 
the Model 100 system routines to delete and make holes in a file preserves the 
HL register. But the real thing is it works. 
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‘Onton ROM Header must be ORGed at 0 by the assembler 
‘or linked at 0 by the linker. 


‘Routine to turn on the Option ROM 
OPON: EQU OFAA4H 


:Globals on the Telcom Back Page to temporarily hold HL and 
‘DE registers during a CALL to Standard ROM, or during an Interrupt. 


HOLDH: EQU OFCCOH 
HOLDD: EQU 0FCC2H 
INTH: EQU OFCC4H 
INTD: EQU OFCC6H 


:Entry point arrived at by CALL 63012 


RST0?: 
INX SP 
INX SP 
JMP PROGRAM 
DB 0,0,0 
RST1?: sNot used 
RET 
DB 0,0,0,0,0,0,0 
RST2?: ;Not used 
RET 
DB 0,0,0,0,0,0,0 
RST3?: ;Not Used 
RET 
DB 0,0,0,0,0,0,0 


OT 
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RST4?: sNot Used 
RET 
DB 0,0,0 
TRAP?: 
DI 
JMP INTRAP 
RSTS?: sNot Used 
RET 
DB 0,0,0 
RST55?: 
DI 
JMP INTSS 


;RST 6 used as short call to a Standard ROM routine. 
RST6?: 

JMP STDCALL 

DB 0 


;Replaces the 6.5 interrupt and sets up a call to 6.5 in Standard ROM 


RST65?: 
DI 
JMP INT65 
RST7?: sNot Used 
RET 
DB 0,0,0 


;Replaces the 7.5 interrupt and sets up a call to 7.5 in Standard ROM 


RST75?: 
DI 
JMP INT75 


;An image of the OPON routine copied to FAA4H by the 
sModel 100 power up logic. 


Continued/ 
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Continued. 

OPONIMG: 
PUSH PSW 
MVI Al 
OUT 0E0H 
POP PSW 
RET 
DB 0 


‘The STDCALL routine allows a program running in the 
;Option ROM to call and return to an address in the Option ROM. 
;Syntax is to use a RST 6 plus the address to be called. 


: RST 6 
: DW 04B44H 
STDCALL: 
DI 
SHLD HOLDH ;Caller’s HL 
XCHG 
SHLD HOLDD ;Caller’s DE 
POP H :(HL) = Routine to Call 
MOV E,M 
INX H 
MOV D,M ;DE= Routine to Call 
INX H : ;HL = Return Address 
PUSH H 
LXI H,OPON sreturn through OPON 
PUSH H 
PUSH D ;Return Address 
LHLD HOLDD ;Caller’s DE 
XCHG 
LHLD HOLDH ;Caller’s HL 
EI 


Continued/ 
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Continued. 


Routines for each of the hardware traps. 
INTRAP: 


INTSS: 


INT6S5: 


INT7S: 


OPX: 


‘Turns off the Option ROM (or turns on Standard ROM) 


INTCALL 
0024H 


INTCALL 
002CH 


INTCALL 
0034H 


INTCALL 
003CH 


;Depending on your viewpoint. 


‘This routine must be ORGed at 85H. Ensure that the 
sprevious code does not overlap into 85H 


STDON: 


OPEXIT: 
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The INTCALL routine allows a program running in the Option 
;ROM to call an interrupt routine. 
sSyntax: CALL INTCALL plus the address to be called. 


DW 24H 

INTCALL: 
SHLD INTH ;Caller’s HL 
XCHG 
SHLD INTD ;Caller’s DE 
POP H ;(HL) = Routine to Call 
MOV E,M 
INX H 
MOV D,M ;DE = Routine to Call 
INX H : sHL=Return Address 
PUSH H 
LXI H,OPON sreturn through OPON 
PUSH H 
PUSH D sReturn Address 
LHLD  INTD ;Caller’s DE 
XCHG 
LHLD  INTH ;Caller’s HL 


JMP STDON 
sEND OF ROM HEADER PORTION OF CODE 


eee == =e 55 === =Model 100 Routins= = ===-===== 
‘Poll the keyboard and return with or without key 
;Entry: None 
Exit: Z if no key. Carry set if afunction key pressed 
KYREAD: EQU 07242H 
;Clear The Screen 
CLS: EQU 04231H 
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Output a character to LCD 

;Entry Character in A Reg 

CHROUT: EQU 04B44H 


;Retrieve next directory entry of an active file 
;Entry: | HL should point to one directory entry less than the 


; point at which to begin the search. The search routine 

; starts by incrementing to the next entry 

;Exit: Zset = no more entries 

: else 

R HL points to the next directory entry with an active file. 
NXTDIR: EQU 020D5H 


;Locate an empty directory slot. 
;Entry: none 
sExit: HL points to a free slot 


FREDIR: EQU 020ECH 
sPosition the cursor 

;Entry: H=Column 1-40 

; L=Row 1-8 

sExit: None 

CURPOS: EQU 0427CH 


Erase to end of the current line 


ERAEOL: EQU 0425DH 
:Turn Cursor On 
CURSON: EQU 04249H 
;Turn Cursor Off 


Continue 
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:Position the cursor to 1 of 24 bar cursor positions 

;Entry HL = position 0-23 

BARPOS: EQU 059C9H 


:Toggle bar cursor to opposite state at poisition 
Specified in HL 

;Entry: HL = Position 0-23 

BARCUR: EQU 059ESH 


joreeee 


;Convert Model 100 directory name "FILE DO’ to 
;Displayable name ’FILE.DO’ 
Entry: DE points to Directory name 

HL points to buffer for formatted output 
MKPNAM: EQU 059ADH 


BEEP: EQU 04229H 


sMake a hole (space) in RAM file 
Entry: HL = where to make the hole 
BC = Size of the hole 
MAKHOL: EQU 06B6DH 


sDelete bytes in a file 
iEntry: HL= where to delete 

BC= number of bytes to delete 
MASDEL: EQU 06B9FH 


’ 


sReorganize directory pointers 
DIROK: EQU 02146H 
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=ese=e22==== === =Model 100 Addresses======== 
;Beginning of the User Directory Area 

USDIR: EQU OFBB6H 

Beginning of free space 

MOAT: EQU OFBB6H 

.= = = = = = =Globals Allocated to TELCOM back Page = = = = = = 
;Pointer to the start of the search string. 

;And its length 

SEARCH: EQU OFCCAH 


SEARCHLEN: EQU 0FCCCH 


, 


;Pointer to the Replace String and its length 
REPLACE: EQU OFCCEH 
REPLACELEN: EQU OFCDO0H 


’ 


;Current location in the TEXT file 
LOC: EQU 0FCD2H 


Continued/ 
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Ae Check that at least 512 bytes of free space 
‘ Exists. 
LXI H,0 
DAD SP 
5 XCHG 
LHLD MOAT 
2. Subtract High bytes of Moat from Stack. Result 
; Must be at least 2 (0200H = 512) 
MOV A,D 
SUB H 
JIC OMEM 
CPI 2 
JC OMEM 
eS: Install The ROM name 
LxI H,ROMNAME ;Name to appear on Menu 
CALL TRGINS Install it 
4. Execute the main program 
CALL SANDR 
“5; Return 
JMP STDON 
ROMNAME: DB ’SandR’,0 
OMEM 


:Print insufficient Memory message and exit 


LxI H,NOMEM 
CALL DSPMSG 
CALL GETCH 
JMP STDON 


wre 
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NOMEM 

DB 12,’Insufficient Memory’,13,10 

DB "Any Key to Exit’,0 
TRGINS 


;Model 100 directory. 
Entry: | HL points to 6 OR LESS null TERMINATED 
: character string to use for the name. 


’ 


sExit: None 
31. Test if a Trigger file exists 
PUSH H ;Save New File name. 
CALL FOTRG ;Find an old trigger file 
POP D ;File Name 
SDs If so then install over it 
JINZ TRGINS1 sIf found install over it. 
3; Otherwise locate a free directory 
PUSH D selse 
RST 6 ;Call Std ROM to 
DW FREDIR ;Find an empty Slot. 
POP D sand install 
34. Copy in OFOH file type and OFFFFH start 
TRGINS1: 
M,0FOH Trigger File type 
INX H 3Step past start 
MVI M,0FFH Set start to OFFFFH 
INX H 
MVI M,0FFH 
INX H 


Continue 
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555 Copy the name to the first null and then 
: nulls to the rest of the name. 
MVI C8 ;and copy in the name 
TRGINS2: 
LDAX D 
MOV M,A 
INX H ;Fill the rest of the 
ORA A sname with nulls when we 
JZ TRGINS3 shit the null terminator 
INX D : 
TRGINS3: 
DCR Cc ;directory name with nulls 
INZ TRGINS2 
RET 
FOTRG: 


;Searches the directory for an already existing trigger 
-file and returns a pointer to it in HL if found. 
;Entry: None 

Exit: Z set if none found 

F else 

HL points to the directory entry 


1, Starting behind the free directory 
LXxI H,USRDIR-11 ;Free dir - 1 entry 
2 Get the next in use File 
FOTRG1: 
RST 6 ;Call Std ROM to 
DW NXTDIR sget Next Live File 
RZ sno file found 


nn OT 
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33. Return Pointing to it if it isa ROM 
: trigger file. 
MOV A,M sis ita ROM Trigger 
CPI OFOH ;Type 
JINZ FOTRG1 3No - Go again 
ANA A ;Clear Z flag 
RET 
SANDR 


‘This routine calls a menu display like the Model 100 
;System Menu but only including visible .DO files. 
:The user may position the bar cursor over a file 
sname and press enter to select a file for search 

sand replace operations. 


ne Allocate Stack space for 24 words and 
- save the pointer to the space. 
LXI H,-48 
DAD SP 
SPHL 
SANDR1: 
PUSH H 
2: Set all 48 bytes to OFFH 
MVI C,48 
SANDR2: 
MVI M,0FFH 
INX H 
DCR Cc 
JNZ SANDR2 
33s Locate all DO files and save pointers to 
; Directory entries for each 
POP H ;Pointer in HL 
PUSH H 


CALL FINDDO 


Continued/ 


12-14 


Chapter 12, Search and Replace 


EPEC RR SORCERY Pa ee noe Ped Wirt Sen aac? OS 
34. Display an empty menu 
CALL DISPEMPTY 
39s Write any active .DO files over the empty 
: slots. 
POP H sPointer 
PUSH H 
CALL DISPDO 
36. Let user position the cursor and pick 
POP H ;Pointer 
PUSH H 
CALL  PICKDO 
POP D : ;Pointer 
STs If User selected F8 (7 in a reg) then exit 
CPI 7 
JZ SANDR3 
38. The only other posibility is ENTER. Check 


That the cursor was over a valid entry 

Not OFFFFH as user could have been looking 
Ata display with no .DO files. Directory user is 
pointing to is returned in HL 


PUSH: =D ;Pointer 
MOV AL 
ANA H 
INR A 
39. If it is legal then call the search and 
: Replace routine 
CNZ SR 
POP H 
310. And Redisplay the menu 


JMP SANDR1 


Continued/ 
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Bea ce etre hd area Aca ee Seg go cia ua edie rece = 
SANDR3: 
sh, Deallocate the stack space. 
LxI H,48 
DAD SP 
SPHL 
RET 
FINDDO 


‘Entry: HL points to a memory area for the storage of up to 24 pointers. 
Exit: The memory area has been loaded with pointers to 
Directory entries if any of .DO files in the system. 


PUSH H ;Save Pointer 
as Starting from one behind the first free 
; user directory slot. 


LXI H,USRDIR-11 3Start back one 


oD Find the next active file and return if none found 
FINDDO1: 
RST 6 3Call Std ROM 
DW NXTDIR :To locate next active file 
POP D ;Pointer 
RZ sNo more files 
335 Test the type byte for COH = .DO file 
MOV A.M ;Get File Type 
CPI 0COH sIs it .DO type 
JNZ FINDDO2 ;Skip if not 


Continue 
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Continued 


34. And save it if it is 


XCHG selse save pointer 
MOV ME 
INX H 
MOV M,D 
INX H 
XCHG 
FINDDO2: 
PUSH D 
JMP FINDDO1 


DISPEMPTY: 


‘Display a menu and screen of .DO Files 


31. Clear Screen 
RST 6 ;Call Std ROM to 
DW CLS ;Clear The Screen 
$2i Display the Logo 
LxI H,LOGO ; ;Display MSG 
CALL DSPMSG 
23: Position to the last line 
CALL ROW8 
34. Display a mini-menu (Exit Option Only) 


LxI H,MINIMENU 
CALL DSPMSG 


358 Display 24 empty slots 


CALL SLOTS 
RET 
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31234567890123456789012345678901234567890 

LOGO: DB ’ Search and Replace (c)1988 KCSI’,0 

MINIMENU: DB Mee ee ee hs ce oes oR xIEO 

SLOTS: 


Display 24 Empty slot positions on the bar cursor style screen 


ey From 0 to 23 
XRA A ;Starting from 0 
SLOTS1: 
CPI 24 ;Stop when A passes 23 
RZ 
ex Position to that slot 
MVI H,0 
MOV LA 
PUSH PSW Save slot count 
RST 6 ;Call Std ROM 
DW BARPOS ;to move to bar position 
33: And print the ’-.-? empty entry 
LxI H,EMPTY sand print an empty 
CALL DSPMSG 
4. Next Slot 
POP PSW ;Slot count 
INR A 


JMP SLOTS1 
EMPTY: DB *--”,0 
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DISPDO: 

Display .DO files at bar cursor positions. 

;Entry | HL points to memory holding up to 24 

: pointers to directory entries of .DO files 


’ 
x 


Ls Save pointer and Allocate 10 bytes for formatted name 
XCHG 
LXI H,-10 
DAD SP 
SPHL 
XCHG 
32; For 0 to 23 entries 
MVI C,0 
DISPDO1: 
MOV A.C 
CPI 24 
JZ DISPDO2 
33. Or until the pointer points to OFFFFH 
MOV A.M 
INX H 
ANA M 
INR A 
JZ DISPDO2 
34. Get the Directory Entry 
PUSH H ;Pointer to Pointers 
MOV AM 
DCX H 
MOV L,M 
MOV HA 
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eS: Step to the file name portion 
INX H 
INX H 
INX H 
6. Format The Name 
PUSH D ;Buffer 
PUSH B ;Slot Number 
XCHG 
RST 6 ;Call Std ROM 
DW MKPNAM ;to Format the name 
POP H ;Slot Number 
PUSH H 
i Position the cursor 
RST 6 ;Call Std ROM 
DW BARPOS ;for bar position 
POP B Position 
POP H ;Pointer to Buffer 
PUSH H 
PUSH B 
38. Display the formatted name 
CALL DSPMSG ;Display The Name 
9. Square up and go again 
POP B ;Bar Position 
POP D ;Buffer Again 
POP H ;Pointer to Pointers 
INX H ;Adjusted 
INR Cc 
J DISPDO1 
DISPDO2: 
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310. Clean up the stack 
LXI H,10 
DAD SP 
SPHL 
RET 
PICKDO 
:Allows bar cursor to be moved with left and right 
;Arrows only 
;Entry: | HL Contains base of array of pointers to 
. to directory entries 
sExit: HL Points to the Directory Entry the Bar Cursor 
; Was Over. 
XCHG ;Pointer to DE 
ae Turn the cursor on at 0 
LX] H,0 ;Starting from 0 
PUSH D 
PICKDO1: 
Cc BARTOG 


JMP PICKDO3 


:This entry is used to ring the beeper if the 
;Key stroke is an error. 


PICKDO2: 
PUSH H 
RST 6 ;Call Std ROM 
DW BEEP ;to BEEP 
POP H 
2. Get User Key stroke and dispatch accordingly 
PICKDO3: 


PUSH H 
CALL GETCH 
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$3: 


3. 


Carry set indicates a function Key 


If it is F8 (A=7) then bail out 


INC 
POP 
CPI 

JINZ 
POP 
RET 


PICKDO4 
H 

7 
PICKDO2 
D 


;Beep and try again 
Else clear the stack 


Left Arrow can move only if not at position zero. 


PICKDO4: 


CPI 
JNZ 
POP 
MOV 
ORA 
JZ 
CALL 
DCX 
JMP 


29 
PICKDOS 
H 

AH 

L 
PICKDO2 
BARTOG 
H 
PICKDO1 


sLeft Arrow 


;Can’t move 
;else current position off 


Right Arrow can move if new pointer is valid 
If not valid, the cursor wraps to position 0 


PICKDOS: 


CPI 
INZ 
POP 
CALL 
POP 
INX 
PUSH 
DAD 
DAD 
MOV 


;Right Arrow 


;Can always move 

SO toggle off 

;Now Where do we go 
;Up one 


sDouble it 
;Offset into table 
sIf not FFFFH 
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INX H ;Then Move is legal 
ANA M 
INR A 
POP H 
JINZ PICKDO6 Legal 
LXI H,0 ;Not legal, wrap to zero 
PICKDO6: 
PUSH D ;Restore the pointer 
JMP PICKDO1 
$33 Last chance is for an ENTER key. If it is enter 
: Then return what is being pointed to. 
PICKDO?7: 
CPI 13 
POP H 
INZ PICKDO2 sInvalid Key 
POP D 
DAD H ;Position times 2 
DAD D 3Plus Table base 
MOV A,M sand load the value 
INX H 
MOV H,M 
MOV LA 
RET 
BARTOG 


> 


Toggles the bar cursor at the position specified in HL 


HL is preserved and restored. 


PUSH 
RST 
DW 
POP 
RET 


H 
6 3Call Std ROM 
BARCUR ;to toggle BAR 
H 
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;Poll the keyboard until a key is hit. 

;Return the value in A register. 

;C set if its a function key and A will = 

:0=F1, 1=F2... 7=F8,8 =_LABEL,9 = PRINT,10 =SHIFT- 
PRINT, 11 = PASTE 


RST 6 ;Call Std ROM to 

DW KYREAD ;Poll the keyboard 

JZ GETCH ;Keep at it til something 
RET sgotten 


;Entry HL points to the message 
;Exit HL points to the NULL at the end of the message 


a4, Until the Character is null 

MOV A,M ;Get char 

ORA A 

RZ ;Return if NULL 
$25 Send it to the screen 

PUSH H ;Save pointer 

RST 6 sCall Std ROM to 

DW CHROUT ;Display it 

POP H sRestore Pointer 
£3; Point to the next character 

INX H sNext char 


JMP DSPMSG 
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Continued 


LXI H,(256*1) +8 sCol 1 Row 8 

RST 6 ;Call Std ROM 
DW CURPOS ;to position cursor 
RET 


’ 


SAsk User for Search and Replace strings and execute. 
;Entry: | HL Points to a directory Entry for a TEXT 
;File to be processed. 


31. Retrieve the start pointer from the directory 
: and save it 

INX H 

LXI D,LOC 

MOV AM 

STAX D 

INX H 

INX D 

MOV AM 

STAX D 


Continued/ 


12 -25 


Chapter 12, Search and Replace 


Continued 


£2, 


2 


Allocate two 21 byte buffers on the stack to hold 
The search and Replace Strings and save pointers 


LXxI H,-42 
DAD SP 

SPHL 

SHLD SEARCH 
LxI D,21 
DAD 


D 
SHLD REPLACE 


At Row 8 Ask user for a search string and erase 
the rest of Row 8 


CALL ROW8 


LXxI H,SPROMPT 
CALL DSPMSG 


RST 6 3Call Std ROM 
DW ERAEOL ;To clear to EOL 
Point to the search buffer and allow the user to 
enter up to 20 bytes 

LXI D,20 


LHLD SEARCH 
CALL GETSTR 


The GETSTR routine returns the length of the 
entered string in HL so save it 


SHLD SEARCHLEN 


If the length is 0 (no search string) then 


exit 

MOV AL 
ORA H 
JZ SR1 


Continued/ 
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Continued 


HE At Row 8 ask the user for a replace string 
and erase to end of line. 


CALL ROW8 


LXI H,RPROMPT 
CALL DSPMSG 


RST 6 3Call Std ROM 

DW ERAEOL ;To clear to EOL 

POP D ;Limit or end of buffer 
38. Point to the replace buffer and allow 20 


characters of replace text 
LXI D,20 
LHLD REPLACE 
CALL GETSTR 
39. Save the length 

SHLD REPLACELEN 
310. And do the search and replace 


CALL SANDRPL 


slid. Square up stack for the exit. 
SR1: 
Lx] H,42 
DAD SP 
SPHL 
RET 
SPROMPT: DB Search for :’,0 
RPROMPT: DB Replace with :’,0 


i DOT 
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Lehi Rae ecm sean ee Rr ee ere 
SANDRPL 
He Retrieve start of the file. 
LHLD LOC 
o2i, If it is CTRLZ then we're all done. 
MOV A,M 
CPI 26 
IZ SANDRPL1 
+3: Load file into HL and search string to DE 
XCHG 
LHLD SEARCH 
XCHG 
34. And look for it 


CALL CMPSTR 


aS. Replace it there’s a match 
CZ RPL 
36. Step forward one in the file and try again 
LHLD LOC 
INX H 
SHLD LOC 


JMP SANDRPL 


Hee On exit reorganize the directory before returning. 
SANDRPL1: 
RST 6 3Call Std ROM 
DW DIROK ;to re-organize 
RET 
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Continued 


Replace routine. 

;Entry: LOC = Where to replace. 

;This routine could probably be improved since 
;MASDEL and MAKHOL supposedly preserve the HL 
;Register. It wouldn’t be necessary to keep reloading. 


’ 
» 


sli Delete the length of the search string from the the file 

LHLD SEARCHLEN 

PUSH H 

POP B 

LHLD LOC 

RST 6 ; ;Call Std ROM 

DW MASDEL :To Delete bytes 
320 Make a hole the length of the replace string 

LHLD REPLACELEN 

PUSH H 

POP B 

LHLD LOC 

RST 6 ;Call Std ROM 

DW MAKHOL ;to make the hole 
33: Copy the replacement string to the hole 

LHLD REPLACELEN 

PUSH H 

POP B 

LHLD LOC 

XCHG 


LHLD REPLACE 
CALL MEMCPY 


34. Increment the LOC pointer by Length - 1 
; So that we don’t end up with recursive 
; Replacement 


Continued/ 
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Continued 


LHLD REPLACELEN 


XCHG 

LHLD LOC 
DAD D 
DCX H 
SHLD LOC 
RET 


;Entry: | HL points to the receiving buffer 
; DE contains the maximum length allowed 
Exit: HL contains actual length entered. 


PUSH H ;Buffer 
31. Get the pointer to the end of the string on 
7 the stack END = Start + Length and the start 
over that. : 
PUSH H ;Buffer 
DAD D ;Limit or end of the buffer 
XTHL 
2h Turn on the cursor 
PUSH H 
RST 6 ;Call Std ROM 
DW CURSON ;to turn it on. 
POP D ;Buffer 
33. Save the Buffer 
PUSH D 
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OC mth eae hae ate hear Sete lieh ease meee ene 
‘4. Get a character 
GETSTR1: 
CALL GETCH 
35% Ignore Function keys (Carry Set) Beep and go again 
JC GETSTR4 
36. Carriage Return is the end of user input 
GETSTR2: 
CPI 13 
JZ GETSTR6 
ile A backspace can only be done if 
; The current buffer pointer not = 
; the start of the buffer 
CPI 8 
JNZ GETSTR3 
POP D ;Current pointer 
POP B ;Buffer end 
POP H ;Buffer Start 
PUSH H 
PUSH B 
PUSH D 
CALL CMPHLDE ;Compare HL and DE 
JZ GETSTR4 Ignore if HL=DE 
2 If Okay then decrement the current buffer 
: pointer 
POP D 
DCX D 
PUSH D 
39. And display BS-SPACE-BS to clear the character 


on the screen and go again. 
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LxI H,RUBOUT 
CALL DSPMSG 
JMP GETSTR1 


310. Ignore all other control characters 
GETSTR3: 
CPI me 
JC GETSTR4 
od; And hex 7FH 
CPI 07FH 
JZ GETSTR4 
$12: So we have a valid ASCII character. Check if the 
: The current pointer is at the end of the buffer. 
‘ If it is then ignore the input. 
MOV CA ;Save The Character 
POP D ;Current Pointer 
POP H ;End of Buffer 
PUSH H 
PUSH D 
CALL CMPHLDE 3;Compare 
JZ GETSTR4 sIgnore if equal 
$13; The character is placed in the buffer and the 
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Buffer is incremented. 


MOV AC 
POP D 
STAX D 
INX D 
PUSH D 
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Contin’. oo eecesecsecccaccenceesececeesceeeesesennenseeecensenteceneceseenens 
314. Display the character and go again 

RST 6 ;Call Std ROM 

DW CHROUT ;to Display it 


JMP GETSTR1 


Jumping to this address causes a beep and 
a jump back to the top, used for invalid characters 


’ 


GETSTR4: 
RST 6 ; 3Call Std ROM 
DW BEEP sto beep 
JMP GETSTR1 ;And jump to the top 
S155 This is the exit when CR is pressed. First 
Turn the cursor off 
GETSTR6: 
RST 6 ;Call Std ROM 
DW CUROFF sto turn it off 
316. Store a null at the current buffer pointer. 
POP H ;Buffer pointer 
XRA A 
MOV M,A 
317. Get the length in HL and exit 
POPD D Limit or end of Buffer 
POP D :Start of Buffer 
MOV AL 
SUB E 
MOV LA 
MOV AH 
SBB D 
MOV HA 
RET 
RUBOUT: DB 8,’ ’,8,0 


TAT 
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CMPHLDE 
‘Compare HL and DE 
;Entry: | HL anad DE with value to compare 
;Exit Z flag set if HL-DE 
‘ Carry Set if DE>HL 
MOV AH 
CMP D 
RNZ 
MOV AL 
CMP E 
RET 
CMPSTR: 


;Compare strings pointed to by HL and DE 
;Comparison stops when (DE) =0 success 
;Or (DE) < >(HL) = nomatch 


;Entry: 


sExit: 
s1s 


DE points to null terminated string to search for 
HL points to where in the file to match 
NZ if the match fails or Z if successful 


Retrieve a character from the search string. 
If it is null, then the search is successful 


LDAX D 
ORA A 
RZ 


Otherwise compare and return for mismatch 


CMP M 
INX H 
INX D 
RNZ 
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Continued 


3. Go again 
JMP CMPSTR 


31. Exit when BC exhausted 
MOV A,C 
ORA B 
RZ 
32 Otherwise move it and increment 
MOV AM 
STAX D 
INX H 
INX D 
DCX B 


JMP MEMCPY 
END 
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Tricky Routines 


The RST 6 approach will work for most Standard ROM calls, but there are some 
routines that will destroy the stack such as calling TEXT or the LINE plotting 
routine. 


There is no canned approach that works with these, and you have to understand 
exactly what the routine does in order to be able to work around it. Calling the 
TEXT editor is probably one of the trickiest, so I thought I'd illustrate it to give 
you some idea of the types of solutions needed. 


TEXT is not very friendly to programmers. It does things to the stack, destroying 
all record of where you were so that you can’t get back, and if approached from 
the wrong entry point will always jump to the Model 100/102 menu on exit. 


You can get into TEXT by CALLing 24046 (SDEEH), the entry address to the 
TEXT program, but you will not return. This entry point always causes an exit 
to the main menu when editing is completed. 


In order to get into TEXT and back it is necessary to find another door into the 
TEXT program. 
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Here are a few lines from the initialization code of TEXT at address SF65H. 
The code is jumped to after the name of the file to be edited has been resolved. 
On entry HL contains the address of the first character in the file. The last line 
at 5F74H saves the value 5797H at the address F765H. It becomes apparent 
later in the logic for TEXT that when F8 is pressed to exit from TEXT, the 
program recovers the address saved at F765H and jumps to it. 5797H is the 
address of MENU which is why TEXT always returns to the menu. So the trick 
is to load HL with the address that you want to return to, and then jump into 
TEXT at 5F71H. 


SF65 PUSH H ;Save start of the file to edit 
SF66 LXI H,0 ;Set offset from file start at 0 
SF69 SHLD  F6E7H _ ;Save the offset 

SF6C MVI Al 31 for TEXT, 0 for BASIC EDIT. 


SF6E LXI H,5797H_ ;Address of MENU routine 
SF71 STA F921H —;Save TEXT or EDIT type. 
SF74 SHLD F765H — ;Save MENU Address for exit. 


The conditions that must exist for a jump into the Model 100 TEXT program 
at SF71 are: 


1 The address of the start of the file has been pushed on the stack. 

2: The A register contains 1. 

3. The HL register contains the address that you want to jump to 
when TEXT is done. 

4. F6E7H contains the offset into the file at which to begin editing. 


Usually zero unless you want to the limit the person to some 
place after the start of the file. 


Chapter 13, Tricky Routines 


There is one other problem to resolve shown below. This routine is CALLed 
after every key stroke while TEXT is running. The stack pointer is reinitialized 
from a value stored at FB9DH. This address holds the top of the stack, and the 
routine is a quick way to clean up any litter left on the stack. The problem is that 
some of the litter that TEXT cleans up includes your route home. Any return 
addresses placed on the stack are swept away here. 


SDSD POP B ;RETurn to TEXT into B 
SDSE LHLD  FB9DH_ ;Load Top of stack to HL 
5D61 SPHL ;ReSet to top of stack 
SD62 PUSH B sRestore RETurn to TEXT 
SD63 RET ;And back to TEXT 


The way around this problem is to set the value at FB9DH temporarily to protect 
your return addresses. 


With this knowledge it is possible to attack the problem. 
The first step is to work out how you would call TEXT from a .CO program. 


Here is a sample routine that could be used, that assumes that when it is called, 
the pointer to the start of the file in memory is in the HL register. 


TXTCAL: 
XCHG ;mem in DE 
LHLD  OFB9DH save the stack top 
PUSH H son the stack 
LXxXI H,0 soffset from start of file 
SHLD OF6E7H 
DAD SP sextract stack value 
SHLD  OFB9DH ;and create phoney stack top 
PUSH D saddress of the text file. 
MVI A,l 31 for non BASIC EDIT 


LXI H,TXT1  ;put return in HL 


TXTI1: 
POP H ;extra push left by TEXT 
POP H ;the original stack 
SHLD OFB9IDH 
RET 
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So far so good. This will work from a .CO file, but for a ROM program things 
get more complicated. 


1s You cannot simply jump to TXT1 at the end of TEXT because 
TXT1 is an address in the Option ROM. This is solved by 
pushing TXT1 on the stack and letting the exit from TEXT 
jump to OPON. The return at the end of OPON will pick up 
TXT1 and jump to it. 


25 You cannot jump to 5F71H from the Option ROM as that 
address is in Standard ROM. We have to use the jump 
technique described in an earlier chapter of pushing the 
address in Standard ROM to jump to, and then jumping 
to STDON. 


3 The last problem looks awkward. TXT1 pops an old value 
left on the stack by TEXT. If we jump to OPON from TEXT 
with that on the stack, the return at the end of OPON will 
pick up whatever that junk is instead of the address of TXT1. 
The solution here is to take advantage of the fact that OPON 
pushes and pops the PSW which we do not need to save. If we 
change our entry from OPON to OPON + 1 it will skip the initial 
PUSH, the POP will clear the junk, and the return will now 
pick up TXT1 like it should. 


OPON: 
PUSH PSW 
MVI A,l ;> Enter here 
OUT OEOH 
POP PSW ;< And this clears the extra 
RET ‘ value on the stack 
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So now we have an Option ROM version of the same routine. 


TXTCAL: ;ROM version 
XCHG ;mem in DE 
LHLD OFB9DH save the stack top 
PUSH H on the stack 
LXI H,TXT1  ;Save re-entry 
PUSH H jon the stack 
LXI H,0 soffset from start of file 
SHLD O0F6E7H 
DAD SP jextract stack value 
SHLD  OFB9DH ;and create phoney stack top 
PUSH D saddress of the text file. 
MVI A,l +1 for non BASIC EDIT 
LXI H,OPON + 1 ;Slip past the PUSH PSW 
PUSH H 
LxI H,05F71H 
XTHL ;Stack the jump address 
JMP STDON ;and go 

TAT: 

b POP H sno longer needed 
POP H ;the orignal stack 
SHLD OFB9IDH 
RET 
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Resources 


First I better make it clear that while I love developing FOR the Model 1001 
hate developing ON the Model 100. 


Also because I do this type of work for a living I can justify having the best toys 
to do it with. That also means that I have not done a lot of experimenting with 
low-end systems. I can give you information on what I know is available, but I 
can only give recommendations on what does and doesn’t work where I have 
tried them out. 


Ihave also done a fair bit of custom modification and program creation myself 
and some of what I have done is available as commercial products. [am including 
these for completeness of the lists and out of a sense of greed, hoping that you 
will buy one or more items. 


There are four parts to an Option ROM development system. 


1. 


2. 


The computer on which the development will be done. 


An assembler, compiler or some method of producing machine 
code that is 80C85 compatible. 


A ROM burner or some method of getting them burned. 


Some way of getting the results from the assembler, compiler or 
whatever to the ROM burner. This usually involves 
telecommunications and probably some sort of translation 

from the output to a form that the ROM burner will understand. 
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1. The Computer. 


There are five major areas to choose from here. The decision on which you 
will use will control the final look of your system. 


IBM AT/XT/PC and clones. 

I consider the AT the top of the line not because I am enamoured of the 
machine, but because the software that is available for the beast makes it the 
most versatile development system around. There are at least 6 Cross 
assemblers on the market ranging from Public Domain to about $500.00. There 
are text editors and text formatters and pretty-printers and listing utilities and 
voluminous hard drives and disassemblers and telecommunications programs 
and CP/M emulators. Once you add a CP/M emulator there is another whole 
range of editors, assemblers, disassemblers and ..... I think you get my drift on 
this. If you choose this one, there is very little limitation on what you can do. 


Supplier: Your local Radio Shack, Computer store, mail order whatever. 


CP/M machines, 

This has got to be the second choice. The 8080 for which CP/M was originally 
developed is a cousin of the Model 100 80C85 chip and aside from a couple of 
instructions and hardware interrupts they are identical. Assembler code 
developed for an 8080 CPM machine will be very compatible with the Model 
100. There are plenty of tools available. 


Supplier: Mail order. 


Non-CPM 8080 and Z80 machines such as the Tandy Model 4. 

Provided that assemblers are available for the machine that allow code to be 
ORGed at Address 0 these machines will do the job. I don’t know enough about 
the software for these machines to be able to discuss any, so they are not 
included below. 


Supplier: Radio Shack (at least I think they still sell the Model 4). 
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DEC mini-computers. 

This is not included to be facetious. A great deal of important development work 
for the micro world has been done on these larger machines. I believe one of 
the original versions of Small-C (for the 8080) was developed on a DEC PDP- 
11. DECUS the public domain software group for DEC provides a range of 8080 
cross assembly and development tools for the cost of a tape. A friend of mine 
who has a small DEC at home wanted to buy an IBM PC to develop for the 
Model 100 until he realised that he already had the machine he needed. I don’t 
recommend that you run out and buy one, but if you have access to one, it is 
worth looking in to the DECUS software. Enough said about DEC. 


The Model 100 family itself. 

The Model 100/102 can be used for ROM development. There are assemblers 
available for it, and it has very powerful telecommunications capabilities. It is 
last on the list because the limited memory will make it necessary to develop 4K 
at a time. If your project is an 8K or 16K ROM then you will need some sort of 
external storage device. You probably will anyway even for the smallest projects 
because the chances that the computer will crash during ROM development are 
even higher than with straight .CO program development. 


2. Assemblers/Compilers. 


In general terms there are really only three restrictions on an assembler. It must 
allow a file to be ORGed at address 0000 during assembly or linking. It must 
not re arrange the code and data or must have a switch that prevents such 
arrangement. It must support the full 8080 instruction set. The program does 
not have to be written with 8080 mnemonics, Z80 will do fine, but the Z80 code 
must be limited to only those instructions that exist on the 8080. 


For the IBM PC. 

There are several cross assemblers on the market. In other words the assembler 
runs under DOS, but assembles an 8080 source code file into some format. I 
have only tried one of them out, and they tend to be a little on the expensive 
side. 


Mac8085 $150.00. 

I tried this one and found it a good solid Assembler, but a tad on the slow side. 
Allen Ashley, 395 Sierra Madre Villa, Pasadena, CA, 91107-2902,(818)793- 
5748. 
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Xmac8085 by Allen Ashley $250.00 
Relocating macro assembler which requires a linker supplied with the pack- 
age. No information. Allen Ashley (see address above). 


XASM $249.00 
Cross Assembler for Z80. No information. Avocet Syatems, Inc., 120 Union 
St.,P.O.Box 490, Rockport,ME, 04856,(207)236-9055. 


Cross-Assembler for 8080 $200.00 
No information. Computer Systems Consultants, 1454 Latta Lane, Conyers, 
GA, 30207,(404)483-1717. 


ASM8085 $395 
Relocating macro-assembler. RELMS, 3001 Ross Ave., San Jose, CA, 
95124,(408)265-5411. 


TASM $30.00 Shareware 

This is table driven (user configurable) 8 bit assembler that runs on the PC and 
outputs an Intel Hex formatted file. Available through Compuserve (GO 
IBMSW) and please pay your shareware registration if you use it. I appreciate 
good shareware, and the market should be supported. 


CP/M Emulators. 


In my view, emulators are the only way to go on an IBM PC. Once you have 
an emulation running on your system, there is tons of inexpensive and/or very 
powerful CP/M software available for development. If you decide to go the 
emulator route then any software that is listed for the CP/M system is available 
to you. 


UNIDOS Emulator Board $195.00 

This package is a hardware emulation combined with software. It is lightning 
fast and very easy to use. It runs on most clones, but not all. use it all the time. 
The board comes bundled with UNIFORM a software package that allows 
ready and writing of CP/M diskettes on the floppy drive of your PC. King Com- 
puter Services, Inc, 1016 N. New Hampshire, Los Angeles, CA, 90029, 
(213)661-2063. 


14-4 


Chapter 14, Resources 


ZPEM Emulator Software $45.95 

This package is a software emulation not as fast, but certainly competent. King 
Computer Services, Inc, (see address above) and also available directly from 
The Software Works. 


Z80MU Emulator, Debugger, and Disassembler (free). 

This is an incredible piece of software. It is a complete CPM emulator (and fairly 
fast) with a built in debugger and probably the best disassembler I have ever 
seen. It allows you to disassemble code and insert control breaks so that the 
disassembler knows what to interpret as code, what are tables what are DB 
pseudo-ops etc. It also allows the creation of labels and allows you to insert 
comments. The one draw back is that it is Z80 based and disassembles in Z80 
mnemonics. If you don’t know them, this package is the best reason I ever saw 
to learn. Even if you never use the extra services, it is a good solid CP/M 
emulator that will run well on you PC and I recommend trying it out before you 
consider buying any emulator. Aside from the speed and media handling 
capabilities of something like UNIDOS, I think Z80MU may be the best on the 
market. Placed in the public domain by Computerwise Consulting Services of 
McLean, VA., and available through the CompuServe CPM group, 
CPMFORUM. If you do pick it up is is also worth picking up the XIZI package 
on the same forum. It translates Z80 to 8080 source code and vice-versa. 


For CP/M machines. 
A great deal of software exists for CPM machines. 


Digital Research Development Package $200.00 

In my view this is one of the all round good packages. It suffers the burden of 
all CP/M development tools in that the manual is not very clear, but it does 
include all the data if you know how to look it up. The package includes RMAC, 
LINK-80, and LIB-80 a relocatable macro assembler, linker and librarian, MAC 
anon-relocating assembler that directly outputs Intel HEX files, SID and ZSID 
symbolic debuggers, and some other utilities such as across reference generator. 
RMACis very easy to use and the macro facility makes it easy to switch between 
.CO and ROM development. 


I can’t point you to a good public domain assembler but they must be out there. 
The CPMFORUM on Compuserve probably has a handful. 
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For the Model 100 itself. 


ROM2 by Polar Engineering 

Is terrific, priced about $100.00 the last time I looked. It is an assembler and 
debugger on a ROM chip. It includes macros and is a very powerful little 
system. It has the limitation that it pokes all assembled results into the ORG 
address, but addresses in the code can be offset to get the desired effect. 


ORG 50000 
CALL AROUTINE-50000 
RET 
AROUTINE: 
etc, 


My thanks to Paul Globman for this tip. 
Using a ROM2 macro it would be possible to shortcut the code for calls. 


ADSM Public Domain Assembler. 
Available through Compuserve M100 SIG. 


35 ROM burners. 


Burners come in two basic flavours. The less expensive versions usually require 
a controlling program running on a host computer that talks to the burner 
through an RS-232 connector. Usually software is provided for the host 
computer and the burner itself has a limited amount of smarts. In the second 
version, all of the controls are on the burner and the host computer only has 
to download a data file of what to burn. Once downloaded the burner takes 
over and the computer can be disconnected. 


The first type is less expensive, but usually the software that is provided is for 
an PC. Manufacturers are usually willing to provide control information, but 
if you are planning to control the burner from your Model 100 you will have 
to write your own software. Be sure that the manufacturer is willing to provide 
you the information on what escape and control sequences the burner is 
expecting to receive. 
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A.R.T, for $199.95 

Their advertising blurb states that any computer with an RS232 port can act as 
host (and of course they supply software for a PC host). This would indicate that 
they will supply the control codes. Jameco Electronics, 1355 Shoreway Rd, Bel- 
mont CA., 94002, (415)592-8121. 


GTEK Burners 

They have range of burners and their catalogue indicates they have some other 
nifty stuff such as a ROM Emulator (RAM that can be loaded and used as a 
ROM to save on burning when you are testing). I have used the GTEK 7228. Is 
a good solid workhorse at $599.00. I believe that they supply the control codes, 
but I couldn’t understand the technical part of their manual which is not a good 
sign. It works fine with the PC software that they provide. GTEK, PO Box 2310, 
Bay St. Louis, MS, 39521-2310, (800)255-GTEK. 


4. Conversion Utilities 


You are really on your own on this one. I have presented the format of an 
Intel Hex file in chapter 8. The M100SIG on Compuserve offers a BIN- 
HX.BA program that will convert memory to Intel Hex Format. Several of 
the assemblers mentioned TASM, and MAC for example directly output data 
in Intel hex format. I have some utilities that work for the PC to convert 
CP/M .COM files to Intel hex. Feel free to contact me. 


Download Utilities 

This is another wide open area. If you have a smart burner, then almost any com- 
munications program will do the job. If your computer must control the burner 
then either the company will usually supply the software for a PC or the control 
codes and you’ll have to write the program yourself. 
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Other Machines 


If you refer back to chapter 6 and the listing for ROMHD.ASM, you will realize 
that there are only six machine dependent pieces of data in the code. 


1, 


The address of the TELCOM back page used for global storage 
of the H and D registers. 


The address of OPON after the image of the routine has been 
copied by the power up routine. 


The CALL address used to start an Option ROM that is equivalent 
to CALL 63012 on the Model 100. 


The port used to turn the Option ROM on and off. 

A good re-entry point at which to ORG STDON so that the 
instruction in Standard ROM following the OUT to the Option 
ROM control Port isa RET 


The address in Standard ROM ofa piece of code that does a 
POP PSW and a RETurn. 


If you can resolve this information then you can create ROMHD.ASM file for 
any machine in this family. 
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I have no experience with any of the other machines but I was able to dig up 
what appear to be some comparable addresses for the creation of the 
ROMHD.ASM file for the Model 200 and the NEC 8201. 


100 200 NEC 8201 
OPON: OFAA4H OF4D3H 0F991H 
TELCOM bk page OFCCOH OF8S6H OFBCOH 
Op ROM port OEOH 7? 0A1H 
Port bit 0 2? 0 
Entry 630122? 62393 
STDONORG 00085H 2? 2? 
APOPRET 026C8H ?? 2? 


The entry address for the Model 200 will be whatever address is used to install 
a standard commercial ROM. Disassembly of the code at that address should 
reveal something similar to the code at 63012 for the Model 100. 


F624 DI ;Disable interrupts 

F625 MVI Al ;Set Bit 0 on 

F627 OUT 0EH :Turn on the Option ROM 
F629 RST 0 3Call 0000H 


This will give you the data on the port to use. Then dig around in the low 
addresses of the Standard ROM looking for a RET that occurs somewhere 
between 48 H and about 100H. Locate a POP PSW and RET that occur 
anywhere in the Standard ROM. 


Once you have this information then modify ROMHD.ASM accordingly. 


The following is the listing for a NEC 8201 that uses equates for all the variable 
data that is known. This information is offered purely speculatively and I have 
no knowledge that the technique will work for the 200 or the 8201, but it seems 
that it should. If you understand how ROMHD.ASM for the 100 was designed, 
then you should be able to apply those principles to the 200 and other similar 
machines. 
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Listing 15-1 ROMHD.ASM (for the NEC 8201) 


;Main header file for an Option ROM program 

If using a locating linker this should be ORGed at 0000H 
sand should be the first file in the link stream 

;Requires Global space at FCCOH 

This sample lets the system install OPON at FAA4H 


PUBLIC OPON 
OPON: EQU 0F991H 
BACKPAGE: EQU OFBCOH 
OROMPORT: EQU 0A1H 
OROMBITS: EQU 01H 
STDONORG: EQU ;Detective work needed here 
APOPRET: EQU ;Detective work needed here 


;Globals on the Telcom Back Page to temporarily hold HL and 
3DE registers during a CALL to Standard ROM, or during an 
sInterrupt. 


HOLDH: EQU BACKPAGE 

HOLDD: EQU BACKPAGE +2 
INTH: EQU BACKPAGE +4 
INTD: EQU BACKPAGE +6 


;ORGed at Zero by the Linker, this is the 

sentry point to a program called from the main menu 

sby pressing pressing ENTER over the Trigger File or by 
;CALLing 63012 from BASIC. 


RSTO?: 
INX SP 
INX SP 
JMP 100H 
;0r JMP PROGRAM 
DB 0,0,0 
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RST1?: ;Not used 
RET 
DB 0,0,0,0,0,0,0 

RST2?: sNot used 
RET 
DB 0,0,0,0,0,0,0 

RST3?: ;Not Used 
RET 
DB 0,0,0,0,0,0,0 

RST4?: sNot Used 
RET 
DB 0,0,0 


;Replaces the trap interrupt and sets up a call to the 
;trap interrupt in Standard ROM. 
TRAP?: 


DI 
JMP INTRAP 
RSTS5?: sNot Used 
RET 
DB 0,0,0 
Replaces the 5.5 interrupt and sets up a call to 5.5 in 
;Standard ROM 
RST55?: 
DI 
JMP INTS5S 


RST 6 used as short call to a Standard ROM routine. 
RST6?: 

JMP STDCALL 

DB 0 
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‘Replaces the 6.5 interrupt and sets up a call to 6.5 in 
‘Standard ROM 
RST65?: 

DI 

JMP INT65 


RST7?: sNot Used 
RET 
DB 0,0,0 


sReplaces the 7.5 interrupt and sets up a call to 7.5 in 
;Standard ROM 
RST75?: 

DI 

JMP INT75 


:Based on a byte count, We are now at address 40H 

:The 8 bytes at 40h are copied to FAA4H during power up. 
;An image of the OPON routine copied to FAA4H by the 
spower up logic. ; 


OPONIMG: 
PUSH PSW 
MVI A,OROMBITS 
OUT OROMPORT 


POP PSW 
RET 
DB 0 


‘The STDCALL routine allows a program running in the 
:the Option ROM to call and return to an address in the 
;Option ROM. 

;Syntax is to use a RST 6 plus the address to be called. 


RST 6 
7 DW 04B44H 
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Listing 15-1 ROMHD.ASM (Continued) 


STDCALL: 
DI 
SHLD HOLDH ;Caller’s HL 
XCHG 
SHLD HOLDD 3;Caller’s DE 
POP H ;(HL) = Routine to Call 
MOV E,M 
INX H 
MOV D,M ;DE = Routine to Call 
INX H s;HL= Return Address 
PUSH H 
LxI H,OPON sreturn through OPON 
PUSH H 
PUSH D sReturn Address 
LHLD HOLDD ;Caller’s DE 
XCHG 
LHLD HOLDH 3Caller’s HL 
EI 


JMP STDON 


INTRAP: 
CALL  INTCALL 
DW 0024H 
RET 

INTSS 
CALL  INTCALL 
DW 002CH 
RET 

INT6S: 
CALL  INTCALL 
DW 0034H 
RET 
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INT75: 
CALL INTCALL 
DW 003CH 
RET 


:This routine must be ORGed at 85H. Ensure the the previous 
;Code does not overlap into 85H 


ORG STDONORG 
PUBLIC STDON 


STDON: 
PUSH PSW 
PUSH H 
LXI H,APOPRET 
XTHL 
XRA A 
OPEXIT: 
OUT OROMPORT 
RET 


The INTCALL routine allows a program running in the Option 
;ROM to call an interrupt routine. 
syntax: CALL INTCALL phis the address to be called. 


CALL INTCALL 
DW 24H 


EEE T-eE 
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INTCALL: 
SHLD  INTH ;Caller’s HL 
XCHG 
SHLD INTD ;Caller’s DE 
POP H ;(HL) = Routine to Call 
MOV E,M 
INX H 
MOV D,M ;DE= Routine to Call 
INX H sHL = Return Address 
PUSH H 
LXxI H,OPON sreturn through OPON 
PUSH H 
PUSH D sReturn Address 
LHLD  INTD sCaller’s DE 
XCHG 
LHLD  INTH ;Caller’s HL 


JMP STDON 


‘Two alternate methods may be used here. 
‘The first is to use a JMP 100H in the RSTO routine and and 
;ORG 100H statment here. 
:The second would be to use a JMP PROGRAM statment in the 
;RSTO routine and place a 
‘PROGRAM: label here without the ORG statement 
ORG 100H 
PROGRAM: 
;Main Logic for your program begins here 


END 
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ROMS and Carriages 


If you have no experience with ROMS/EPROMS there are several good books 
on the general problem of EPROM burning. One such is "Experiments With 
EPROMS" by Dave Prochnow published by Tab Books, Blue Ridge Summit, 
PA 17294. 


The EPROM (Erasable Programable Read Only Memory) that should be used 
for the Model 100/102 is the 27C256. The C denotes low power CMOS. This is 
a 32K ROM. There are smaller ROMs such as the 16K, 27C128 and the 8K 
27C64 but the price difference between them is so small that it has never seemed 
worth the effort to stock up of three different sizes. 


The other factor that comes up in choosing EPROMS is memory speed. The 
Model 100/102 is very slow and apparently will not tax even the slowest EPROM. 
I have used 250 ns (nano- second) EPROMS and I have been told by an en- 
gineer that units as slow as 300 or 350 ns would still work. The 250 ns speed is 
fairly common. 


It is ok to use faster EPROMS if that is all you can get but it will not make your 
program run faster and once access rates go below 150 nanoseconds, prices start 
to rise. The speed of an EPROM is frequently incorporated in the part number 
by including a dash followed by the speed in tens of nano-seconds thus 


27C256-15 150 nanoseconds 
27C256-25 250 nanoseconds 
27C256-5 50 nanoseconds 
27C256-10 100 nanoseconds 


Burn voltage is usually 12.5 volts. Ask your supplier to be certain. 
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Once the EPROM is burned it cannot fit directly into a ROM socket be- 
cause the pin out is different between the socket and the chip. 


Radio Shack sells an adapter that will change the pin outs. The EPROM chip 
must be soldered to the adapter. The adapter can be ordered through your 
local Radio Shack and is Part Number AXX-7113 and is called the Tandy 
100/200 EPROM Adapter. 


It costs just over $10.00 and comes complete with soldering and installation 
instructions. 


King Computer Services, Inc. 
1016 North New Hampshire 
Los Angeles, CA 90029 
(213) 661-2063 


September 27, 1988 
ROM CARRIAGE ASSEMBLY 


The ROM may be soldered directly to the circuit board. 


Alternatively, a removable circuit board may be created by 
soldering special pins to the circuit board, so that the ROM 
can be easily inserted and removed. 


The ROM or pins are inserted into the side of the circuit 
board marked "component side" and are soldered on the 
reverse. 


Pin 1 is marked on the circuit board on the edge of the card 

away from the two protusions used as insertion guides. These 
reverse notches are used for inserting into the molex socket 

which has guide channels. 


The circuit board requires a spacer of approximately 1/10"on 
the circuit side. 


The grey plastic strips are used to create spacers by cutting 
off two lengths about 1/4" shorter than the carriages and 
gluing them to the circuit side of the board so that the 
space the carriage about 1/10" from the molex socket on the 
M100. They should be glued with super glue or crazy glue. 
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